Information Security Specialist Jobs in District of Columbia
Information Security Specialist jobs in District of Columbia are among the most active in the nation, concentrated heavily in federal government contracting, defense agencies, and cybersecurity-focused consulting firms that make the region a global center for the field. Most hiring is in Washington D.C., Bethesda, and Arlington, where major employers like Booz Allen Hamilton, Leidos, and SAIC consistently maintain large security workforces. Demand runs from entry-level analysts to senior architects, with clearance-eligible professionals and those specializing in FISMA compliance, threat intelligence, and cloud security in particularly high demand. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 74+ Information Security Specialist jobs
Tharros is seeking a Senior Information Systems Security Officer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support ISSO operations across a complex Federal cybersecurity environment, including Assessment and Authorization, continuous monitoring, ATO package maintenance, POA&M management, security artifact quality, cloud and hybrid system support, and cybersecurity compliance. The ideal candidate is a hands-on ISSO who can maintain accurate authorization evidence, coordinate with technical teams, and help keep mission systems secure, compliant, and authorization-ready.
Responsibilities:
- Perform ISSO duties for assigned Federal information systems.
- Support RMF activities, including system categorization, control implementation support, assessment readiness, authorization package maintenance, and ongoing monitoring.
- Develop, review, validate, and maintain security artifacts such as SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, and privacy-related artifacts.
- Create, maintain, and monitor ATO packages in GRC tools.
- Support POA&M development, validation, remediation tracking, exception documentation, closure, and reporting.
- Collaborate with system owners, ISSOs, ISSMs, developers, engineers, assessors, and other stakeholders to address vulnerabilities, security findings, and remediation actions.
- Review vulnerability scan results and support recurring continuous monitoring activities.
- Support audit log review, alert response, and documentation of follow-up actions.
- Ensure assigned systems remain aligned with applicable cybersecurity policies, procedures, and decommissioning requirements.
- Support quarterly cybersecurity performance and compliance reporting.
- Provide ISSO support across hybrid environments, including classified and unclassified on-premise systems, cloud-based systems, DevSecOps environments, and agile development teams.
- Support security for operating systems and technologies including Linux, Windows, open-source operating systems, and cloud platforms.
- Support Cross Domain Solution security governance, assessment, and authorization activities.
- Help improve ISSO workflows, evidence management, POA&M tracking, continuous monitoring, and risk reporting through automation and repeatable processes.
- Translate compliance status, vulnerability data, and remediation progress into clear updates for technical and leadership stakeholders.
Requirements:
- Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
- 10+ years of related cybersecurity experience.
- At least 2 years of recent experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
- Experience applying NIST 800 series, CNSSI 1253, security controls, and RMF principles.
- Experience with emerging security risk management practices, including automation of A&A and continuous monitoring activities.
- CISM, CAP, or GRC certification, or comparable demonstrable experience.
- Experience developing, reviewing, or maintaining SSPs, POA&Ms, risk exceptions, contingency plans, privileged user documentation, ATO packages, and continuous monitoring evidence.
- Experience working with GRC tools and coordinating with technical teams to remediate vulnerabilities and maintain authorization readiness.
- Strong written and verbal communication skills.
- Ability to work onsite at a Government-approved location as required.
Preferred Qualifications:
- Prior DHS, Intelligence Community, DoD, CISO office, ISSM, AO, SCA, or national security ISSO experience.
- Experience supporting large ISSO portfolios, classified systems, hybrid cloud environments, DevSecOps evidence collection, continuous monitoring, and audit readiness.
- Experience with Archer, eMASS, Xacta, ACAS, Tenable.sc, Splunk, GitLab, Axonius, STIG/SCAP validation, or related Federal cybersecurity tools.
- Experience with AWS, Microsoft Azure, Microsoft 365, or other cloud platforms.
- Experience supporting TS/SCI, SCIF, cross-domain, or secure mission environments.
See All 74 Information Security Specialist Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find JobsInformation Security Specialist Jobs by City in District of Columbia
Where District of Columbia roles are concentrated, by current openings.
Information Security Specialist Job Market in District of Columbia
A snapshot from current District of Columbia openings, updated as new roles post.
Who's Hiring
What District of Columbia Employers Look For
The qualifications that appear most often in information security specialist jobs across District of Columbia.
- Active security clearance or eligibility for a federal government clearance
- Bachelor's degree in cybersecurity, computer science, or information technology
- CompTIA Security+ or CISSP certification required by most federal contractors
- Experience with FISMA, NIST frameworks, and federal compliance requirements
- Proficiency with security tools such as SIEM platforms, vulnerability scanners, and firewalls
- Familiarity with cloud security environments including AWS GovCloud or Azure Government
Information Security Specialist Jobs in District of Columbia: Frequently Asked Questions
How do you become a information security specialist in District of Columbia?
The most direct path in the District of Columbia is a bachelor's degree in cybersecurity or computer science combined with an industry certification such as CompTIA Security+ or CISSP, which are standard requirements across federal agencies and contractors operating in the region. Because so much of the local market is tied to federal work, obtaining or being eligible for a security clearance significantly broadens your opportunities. There is no D.C.-specific state license for this role, but clearance eligibility and federal compliance knowledge are effectively prerequisites for the majority of local positions.
How much do information security specialists make in District of Columbia?
Information security specialists in District of Columbia earn a median of about $135,090 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $86,280 for the lowest 10% to over $189,510 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire information security specialists in District of Columbia?
District of Columbia information security specialist roles are posted by tharros, MANTECH, and Peraton and others right now, based on current listings on Migrate Mate as of November 2026. The D.C. market is heavily anchored in federal contracting, so large defense and technology firms with long-term government relationships dominate the hiring landscape.
Which District of Columbia cities have the most information security specialist jobs?
Washington, Bolling AFB, and Pentagon have the most information security specialist openings in the District of Columbia area. Washington D.C. itself drives the bulk of demand through federal agencies and their contractors, while Bethesda and Arlington attract significant hiring from defense contractors and consulting firms that cluster near agency headquarters and the Pentagon.
Are there remote information security specialist jobs in District of Columbia?
Yes, but they are less common than in many tech roles because a large share of D.C.-area positions involve classified systems or on-site federal requirements. About 45% of information security specialist openings tied to District of Columbia are remote or hybrid as of November 2026, reflecting the clearance-dependent nature of much of the local work. The roles most likely to offer remote flexibility are those focused on commercial cybersecurity, threat analysis, or cloud security rather than cleared federal programs.
How can I get hired as a information security specialist in District of Columbia with little or no experience?
The most realistic entry point in the D.C. market is a CompTIA Security+ certification combined with an internship or junior analyst role at a federal contractor, where many large firms like Booz Allen Hamilton and Leidos run early-career programs targeting recent graduates. Starting in adjacent roles such as IT help desk, network support, or systems administration at a government contractor gives you the access and clearance sponsorship opportunities that are hard to find elsewhere. Building familiarity with NIST frameworks and federal compliance concepts, even without direct work experience, distinguishes candidates for junior compliance analyst and security operations center positions.
Where can I find and apply to information security specialist jobs in District of Columbia?
You can find and apply to information security specialist jobs in District of Columbia on Migrate Mate, which lists current openings from employers hiring in the region right now. Search through the available roles, identify the ones that match your experience and clearance level, and apply directly to each one that fits.
See All 74 Information Security Specialist Jobs in District of Columbia
Find roles in District of Columbia that match your experience and apply in just a few clicks.
Find Jobs