Belay Technologies

Cleared technology and engineering services

Mid-Level Information Systems Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeFort Meade, MD, USAIn-person

About the Job

Requirements

A bachelor's degree in a technical discipline from an accredited college or university, or four additional years of experience in lieu of the degree.
Ten years of relevant work experience, including at least four years as an Information Systems Security Officer on programs and contracts of similar scope, type, and complexity.
An IAM Level 1 CWIP certification and one qualifying baseline certification: CAP, CND, Cloud+, GSLC, Security+ CE, HCISPP, CASP+ CE, CISM, CISSP or CISSP Associate, or CCISO.
Experience with the ICD 503/NIST 800-53 certification and accreditation process, the Risk Management Framework, developing and maintaining System Security Plans, reviewing and handling IAVA, interpreting security scan results, interfacing with system administrators and software engineers, and using task-tracking systems such as Jira, Redmine, or ServiceNow.
Understanding of Public Key Infrastructure-based authentication, information security policies particularly within the Intelligence Community, technical security risk assessment fundamentals, and analysis of alternatives.
Ability to communicate ideas and status updates clearly to management and other stakeholders.

Responsibilities

Support security architecture and systems engineering for ICAM projects and provide guidance to the team on system accreditation, including IATT and ATO.
Support an information assurance program for a program, organization, system, or enclave.
Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Maintain an information system's or program's operational security posture and ensure security policies, standards, and procedures are established and followed.
Assist with managing information-system security aspects and perform day-to-day system security operations.
Evaluate security solutions to ensure they meet security requirements for processing classified information.
Perform vulnerability and risk assessment analysis to support certification and accreditation.
Provide configuration management for information-system security software, hardware, and firmware.
Manage system changes and assess their security impact.
Prepare and review System Security Plans, Risk Assessment Reports, Certification and Accreditation packages, and System Requirements Traceability Matrices.
Support security authorization activities in compliance with the National Institute of Standards and Technology Risk Management Framework.

Belay Technologies has been voted Baltimore Business Journal's (BBJ) Best Places to Work 2026!

Belay Technologies is seeking an Information Security Officer to join our intel team. The candidate will be responsible for security architecture and systems engineering supporting ICAM projects. The ISSO will provide guidance to the team to support system accreditation (IATT and ATO).

Description:
Provides support for a program, organization, system, or enclave's information assurance
program. Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed. Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information. Performs vulnerability/risk assessment analysis to support certification and accreditation. Provides configuration management (CM) for information system security software, hardware, and firmware. Manages changes to system and assesses the security impact of those changes. Prepares and reviews documentation to include System Security Plans (SSPs ), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs). Supports security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).

Candidates should have the following qualifications:

TS/SCI Clearance with polygraph

This position has been designated as requiring IAM Level 1 CWIP certification and requires one of the following baseline certifications to qualify
- CAP,CND, Cloud+, GSLC, Security+CE, HCISPP, CASP+CE, CISM, CISSP (or associate), CCISO
- Bachelor's degree in a technical discipline from an accredited college or university
- Ten (10) years relevant work experience. Four (4) years of additional experience may be substituted for a bachelor's degree.
- At least four (4) years of this experience must be as an ISSO on programs and counteracts of similar scope, type, and complexity.

Candidates are required to have the following skills:

Experience with:
- The ICD 503/NIST 800-53 certification and accreditation process
- The Risk Management Framework
- Developing and maintaining SSPs
- IAVA review and handlingInterpreting
- Security Scan results
- Interfacing with System Administrators and Software Engineers
- Task tracking systems (e.g. Jira, Redmine, ServiceNow)
Understands:
- Public Key Infrastructure-based authentication
- A variety of security policies, especially within the IC
- Fundamentals of technical security risk assessment
- Understands how to perform analysis of alternatives
Able to clearly communicate ideas and status updates to management and other stakholders

Perks and Benefits:

8 weeks paid leave - 4 weeks of personal leave, 3 Yay! days, take off on your birthday,11 paid holidays and optional leave up to 6 days through Belay's volunteer program
10% matching in 401(k) contributions vested on day one
$5,000 annual training/tuition
Student Loan Repayment Program
100% company-funded HSA
Rich medical coverage (100% coinsurance)
Dental coverage including orthodontia
Up to $420,000 in life insurance, premiums 100% company funded
Amazon Prime, gym reimbursement, monthly lunches, games and prizes
Pet adoption program, generous referral bonus program, fun events, and more!

At Belay, we are committed to creating an environment where you can thrive both professionally and personally. We believe in transparency and fairness in compensation. Several factors influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, education, specific skills and competencies and certifications. Belay offers a competitive total compensation package that includes benefits and perks, a flexible work-life balance, and career development.

Salary Range: $105,000 to $200,000

Belay Technologies is a certified Service-Disabled Veteran-Owned Small Business located in Columbia, Maryland (Baltimore/Washington area). Belay Technologies specializes in systems automation and full stack development. Belay Technologies provides leading technology and engineering solutions to the DoD, as well as state-of-the-art commercial products. We hire software engineers, web designers, test engineers, systems engineers, systems administrators, database engineers and other tech services. We are an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

About the Company

Belay Technologies

Cleared technology and engineering services

Belay Technologies is a service-disabled veteran-owned technology company serving defense and commercial customers. Its capabilities include software engineering, systems and network administration, cyber operations, virtualization, automation, and artificial intelligence. The company also develops SummitRTS, an automation framework for complex technical workflows. Belay centers on cleared engineering environments where software, infrastructure, cyber, and automation support sensitive missions, while its proprietary technology differentiates it from a staffing-only contractor or standalone software vendor.

Company size: Not listed
Company stage: Not listed
Total funding: Not listed
Headquarters: Not listed
Founded: Not listed

Recently Posted Jobs

Explore more opportunities at Belay Technologies

See more jobs