Information Systems Security Officer Jobs in Virginia
Information Systems Security Officer jobs in Virginia are concentrated in the Northern Virginia corridor, Richmond, and Hampton Roads, where defense contractors, federal agencies, and major technology employers drive consistent demand for ISSO professionals. Booz Allen Hamilton, Leidos, and Northrop Grumman maintain a large hiring presence across the state, recruiting for roles in security authorization, risk management framework compliance, and cloud security. Openings range from mid-level practitioners working toward their first Authorization to Operate to senior ISSOs leading enterprise-wide security programs. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 16+ Information Systems Security Officer jobs









Clearance: An active Top Secret/SCI clearance with CI Poly is required. Candidates who do not meet these clearance requirements will not be considered.
Qualifications:
- Master’s Degree and 2 years work experience, Bachelor’s Degree and 3 years of work experience or equivalent, Associates Degree and 6 years of work experience or equivalent, High School/GED and 8 years of work experience or equivalent.
- Performs assessments of systems and networks within the networking environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
- Establishes strict program control processes to ensure mitigation of risks and supports for obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
- Assists in the implementation of required government policy (e.g.,, NISPOM, DCID 6/3), and makes recommendations on process tailoring.
- Supports the formal Security Test & Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
- Performs analyses to validate established security requirements and recommends additional security requirements and safeguards where required.
- Supports the formal Security Test & Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
- Periodically conducts a review of each system’s audits and monitors corrective actions until all actions are closed.
- Provide guidance on system security, assessment and authorization issues, and INFOSEC policy and security vulnerabilities.
- Support comprehensive investigations into all related data spills and IT incidents at both government and contractor sites.
- Ability to troubleshoot technical configurations and make recommendations on the protection of classified and sensitive data.
- Development and maintenance of all SSP documentation and risk analysis.
- Responsible reporting of security related incidents including development of protective or corrective measures to discover vulnerabilities.
- Familiarity with conducting research and analysis, network and information system security principles and best practices, and controlling, labeling, virus scanning, and transferring data between information systems at varying classification levels.
At CDT, we offer a collaborative and inclusive work environment where your expertise can help shape the future of cybersecurity and engineering solutions.
Compensation and Benefits:
- Competitive salary based on experience.
- Comprehensive benefits package, including health, dental, and retirement plans.
- Opportunities for professional development and career advancement.
CDT is committed to hiring and retaining a diverse workforce. We are an Equal Opportunity employer making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
Apply Now:
If you are a proactive ISSO and thrive in dynamic environments, we encourage you to apply and join the CDT team!
Salary Range: $80,000 - $125,000K based on experience
See All 16 Information Systems Security Officer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find JobsInformation Systems Security Officer Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Information Systems Security Officer Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring



What Virginia Employers Look For
The qualifications that appear most often in information systems security officer jobs across Virginia.
- Active DoD Secret or Top Secret clearance required for most Virginia ISSO positions
- CISSP, CAP, or Security+ certification strongly preferred or required by hiring managers
- Demonstrated experience applying the NIST Risk Management Framework and FISMA compliance standards
- Bachelor's degree in information systems, cybersecurity, computer science, or a related technical field
- Hands-on experience with eMASS or Xacta for security authorization package development and tracking
- Familiarity with DISA STIGs and vulnerability management tools such as Nessus or Tenable
Information Systems Security Officer Jobs in Virginia: Frequently Asked Questions
How do you become a information systems security officer in Virginia?
Most Virginia employers expect a bachelor's degree in cybersecurity, information systems, or a related field, combined with a DoD-recognized certification such as CISSP, CAP, or Security+. Because the state's market is heavily shaped by federal contracting, demonstrating practical knowledge of NIST 800-37 and the Risk Management Framework is essential. Obtaining a DoD security clearance early, even at the Secret level, substantially widens the pool of accessible positions in Northern Virginia and the Hampton Roads region.
Which companies hire information systems security officers in Virginia?
Companies currently hiring information systems security officers in Virginia include SAIC, Apavo, and MANTECH, per current listings on Migrate Mate as of July 2026. Virginia's dense concentration of defense and intelligence contractors makes it one of the most active states nationally for ISSO hiring year-round.
Which Virginia cities have the most information systems security officer jobs?
Arlington, McLean, and Chantilly hold the most information systems security officer openings in Virginia. Northern Virginia dominates because of its proximity to the Pentagon, federal intelligence agencies, and the headquarters of major defense contractors, while Richmond draws openings from state government IT offices and financial sector employers, and Hampton Roads is anchored by Naval Station Norfolk and the defense ecosystem surrounding it.
Are there remote information systems security officer jobs in Virginia?
Yes, though many positions require on-site access to classified systems or government facilities. About 20% of information systems security officer openings tied to Virginia are remote or hybrid as of July 2026, reflecting the clearance and system-access requirements common in this role. Tasks involving security documentation, policy review, and risk assessments are the most likely to be performed remotely when employers permit it.
How can I get hired as a information systems security officer in Virginia with little or no experience?
The most realistic entry path is moving into an ISSO role from an adjacent position such as systems administrator, IT security analyst, or help desk technician, where you already touch access controls or vulnerability management tools. Large Virginia contractors like Booz Allen Hamilton and Leidos run associate and early-career programs that accept candidates with Security+ certification and a clearance rather than years of ISSO-specific history. Building a portfolio of RMF documentation samples and pursuing the CompTIA Security+ or entry-level ISC2 Certified in Cybersecurity credential gives candidates a measurable edge when applying to junior or associate ISSO postings.
Where can I find and apply to information systems security officer jobs in Virginia?
You can find and apply to information systems security officer jobs in Virginia on Migrate Mate, which lists current Virginia openings across the state. Find the roles that fit your experience and clearance level and apply directly.
See All 16 Information Systems Security Officer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Jobs