Leidos' Corporate Information Security Office, reporting through the Digital sector, has an opening for an Information System Security Officer (ISSO) in our Omaha, NE office.
In this role, you will support the operation, maintenance, and authorization of classified information systems by implementing and monitoring cybersecurity requirements throughout the system lifecycle. This position will perform day-to-day information system security activities, maintain Risk Management Framework documentation and evidence, assess system compliance, support vulnerability-management activities, and coordinate remediation of identified security deficiencies.
You must be able to work independently while collaborating effectively with Information System Security Managers, Information Assurance personnel, system administrators, engineers, program management, and customer security representatives. You should possess hands-on experience applying Department of Defense cybersecurity requirements, interpreting security controls, evaluating technical evidence, and translating compliance requirements into practical actions for technical personnel.
Location: Work will be performed on-site at our Omaha office.
Clearance: You must currently hold an active DoD Top Secret clearance and be eligible to obtain Special Compartmented Investigation (SCI) post hire. Those with current TS SCI will be given first consideration.
Primary Responsibilities
This role may include a combination of duties to protect information, maintain security controls, and reduce risk across assigned information systems, sites, or programs.
Serve as the Information System Security Officer for assigned classified information systems.
Support the implementation, operation, maintenance, and continuous monitoring of cybersecurity controls throughout the system lifecycle.
Apply the Department of Defense Risk Management Framework to assigned systems, including security control implementation, assessment preparation, authorization maintenance, and ongoing monitoring.
Assist the Information System Security Manager with maintaining system authorization packages and supporting documentation.
Develop, review, and update system security documentation, including System Security Plans, security control implementation statements, plans of action and milestones, continuous monitoring records, risk assessments, procedures, inventories, diagrams, and supporting evidence.
Evaluate security controls to determine whether they are properly implemented, operating as intended, and producing the desired security outcome.
Collect, review, organize, and maintain technical and administrative evidence supporting security control implementation and assessment activities.
Conduct recurring reviews of assigned systems to verify continued compliance with approved authorization packages, security policies, technical baselines, and customer requirements.
Support continuous monitoring activities by tracking control assessments, vulnerability scans, configuration reviews, account reviews, audit records, training requirements, hardware and software changes, and other recurring security activities.
Develop and maintain continuous monitoring schedules, recurring task trackers, evidence repositories, and status reports.
Identify security deficiencies, evaluate associated risk, document findings, assign or coordinate corrective actions, and track remediation through closure.
Create, review, and maintain plans of action and milestones for identified weaknesses, including accurate deficiency descriptions, risk statements, milestones, resources, scheduled completion dates, and supporting evidence.
Perform vulnerability-management activities, including scan coordination, result analysis, false-positive validation, risk evaluation, remediation tracking, mitigation verification, and reporting.
Use approved vulnerability scanning and compliance-assessment tools to identify missing patches, insecure configurations, unsupported software, and other technical weaknesses.
Review vulnerability and compliance scan results to determine applicability, severity, affected assets, potential impact, and required remediation actions.
Coordinate with system administrators and infrastructure personnel to remediate vulnerabilities, configuration findings, patching deficiencies, and other security issues.
Validate that remediation actions have been successfully completed through rescanning, configuration review, documentation review, or other appropriate verification methods.
Support the implementation, assessment, and documentation of Security Technical Implementation Guide requirements and other approved security configuration baselines.
Review Security Technical Implementation Guide checklists, Security Content Automation Protocol results, configuration evidence, and technical documentation for accuracy and completeness.
Assist technical personnel with interpreting security requirements and identifying compliant implementation approaches.
Conduct account-management and access-control reviews, including reviews of privileged accounts, inactive accounts, group memberships, permissions, authentication requirements, and user-access authorizations.
Review audit records, security logs, and monitoring data for suspicious activity, policy violations, unauthorized changes, or other indications of cybersecurity events.
Support the investigation, documentation, containment, remediation, and reporting of cybersecurity incidents and security violations.
Ensure cybersecurity incidents, vulnerabilities, and compliance deficiencies are reported and escalated in accordance with approved procedures and customer requirements.
Participate in configuration management and change-control activities by evaluating proposed hardware, software, firmware, network, and system configuration changes for potential security impact.
Conduct or support security impact analyses for proposed system changes and document affected controls, risks, testing requirements, and required authorization-package updates.
Participate in Configuration Control Board meetings and provide cybersecurity recommendations regarding proposed changes.
Verify that approved changes are implemented, tested, validated, and accurately reflected in system documentation and security evidence.
Support software approval and installation processes by reviewing software sources, versions, dependencies, vulnerabilities, licensing, technical requirements, and security impacts.
Monitor systems for unauthorized hardware, software, services, accounts, connections, or configuration changes.
Support hardware and software inventory validation and ensure security documentation accurately reflects the authorized system configuration.
Develop, review, and maintain cybersecurity policies, procedures, checklists, implementation guidance, and standard operating procedures.
Provide cybersecurity education, training, and guidance to system administrators, users, engineers, and program personnel.
Support initial and recurring privileged-user, administrator, and general-user security training requirements.
Prepare assigned systems for internal reviews, customer assessments, authorization activities, audits, inspections, and security vulnerability assessments.
Participate in assessment interviews, technical demonstrations, evidence reviews, and system inspections.
Coordinate responses to assessment findings and track resulting corrective actions to completion.
Communicate system-security posture, vulnerabilities, compliance concerns, remediation status, and risk information to the Information System Security Manager, program leadership, technical teams, and customer representatives.
Provide cybersecurity input for system planning, architecture, engineering, procurement, maintenance, refresh, and disposal activities.
Assist with the secure introduction, transfer, handling, sanitization, and disposal of hardware, software, media, and data in accordance with approved procedures.
Review and coach the work of less-experienced cybersecurity personnel, as assigned.
Identify opportunities to improve cybersecurity processes, documentation quality, evidence management, vulnerability remediation, and continuous monitoring effectiveness.
Basic Qualifications
Bachelor's degree coupled with 4-8 years of prior relevant experience. Additional relevant experience may be considered in lieu of degree.
Must currently possess an active Top Secret clearance with eligibility to obtain Sensitive Compartmented Information (SCI) security clearance.
Must possess IAT II 8140/8570 certification (CompTIA Security+ certification, equivalent or higher)
Hands-on experience applying the Department of Defense Risk Management Framework to information systems.
Experience supporting classified information systems and complying with applicable Department of Defense cybersecurity requirements.
Experience implementing, assessing, documenting, or monitoring NIST security controls.
Experience developing, reviewing, or maintaining information system authorization documentation.
Experience with security control implementation, continuous monitoring, vulnerability management, configuration compliance, or assessment and authorization activities.
Experience interpreting cybersecurity requirements and translating them into technical or procedural implementation actions.
Experience reviewing technical evidence to determine whether security requirements have been adequately implemented.
Working knowledge of vulnerability scanning, vulnerability analysis, remediation tracking, and mitigation verification.
Working knowledge of Security Technical Implementation Guides and secure configuration baselines.
Experience collaborating with system administrators, engineers, information technology personnel, program management, and customer security representatives.
Ability to independently manage assigned security activities, recurring compliance requirements, documentation, findings, and remediation actions.
Ability to analyze complex cybersecurity issues and develop practical, risk-informed solutions.
Ability to communicate technical cybersecurity requirements clearly to both technical and nontechnical stakeholders.
Strong technical writing, documentation, organizational, analytical, and problem-solving skills.
Ability to manage multiple systems, projects, findings, and recurring security activities with minimal supervision.
Relevant Experience Considered
Information assurance
Cybersecurity operations
Department of Defense Risk Management Framework
Assessment and authorization
Security control implementation and assessment
System Security Plan development and maintenance
Body of Evidence development and maintenance
Continuous monitoring
Plan of Action and Milestones management
Vulnerability scanning and analysis
Vulnerability remediation and mitigation verification
Experience using vulnerability-management and compliance tools such as Tenable Security Center, Assured Compliance Assessment Solution, Security Content Automation Protocol Compliance Checker, or comparable technologies.
Experience implementing, validating, and documenting Security Technical Implementation Guide requirements.
Experience using STIG Viewer or comparable security configuration documentation tools.
Experience with centralized logging, security monitoring, endpoint security, or vulnerability-management tools such as Splunk, Trellix, Tenable, or comparable products.
Experience developing and maintaining plans of action and milestones.
Experience conducting security impact analyses for hardware, software, firmware, network, and configuration changes.
Experience supporting Configuration Control Boards and formal change-management processes.
Experience preparing for or participating in Department of Defense, Defense Counterintelligence and Security Agency, customer, or other government cybersecurity assessments and inspections.
Familiarity with National Institute of Standards and Technology publications, Department of Defense cybersecurity policies, Security Technical Implementation Guides, and classified information system requirements.
Working knowledge of Windows and Linux operating systems, Active Directory, virtualization technologies, networking, enterprise applications, and infrastructure security.
Experience supporting classified systems in disconnected, isolated, or air-gapped environments.
Experience coaching, mentoring, or reviewing the work of junior cybersecurity personnel.
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting: October 5, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range: Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
You apply on The Muse or on the employer's page; AtiveSite does not receive or process applications and is not affiliated with The Muse. The description above is shown as the source published it.
We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.
Does the pay work here? (estimate)
Estimate for a wage earner: 2026 federal brackets and standard deduction (IRS), Social Security 6.2% up to $184,500, Medicare 1.45% (+0.9% above $200,000 single / $250,000 married), and a state rate you set; set your own state tax rate. It ignores credits, pre-tax deductions, local taxes and benefits. Sources: IRS: tax year 2026 inflation adjustments · SSA wage base per Federal Register notice 2025-19763.
How to prepare and behave
This is editorial guidance, not information from the employer.
Read the whole description and match your examples to its requirements; use the same words the posting uses where they are true for you.
Research the employer before the interview: what it does, who its customers are and recent news; prepare two or three questions about the work.
Arrive early (or log in early for a video call), dress one step above the daily dress code, and test your camera and audio beforehand.
Answer with short stories: the situation, what you did and the result. Give numbers when you have them and never invent them.
Be honest about gaps; say what you did to learn and how fast you can close them.
Ask about the team, the first 90 days, how success is measured and the schedule; do not open with salary and time off.
When pay comes up, know the market range for the occupation and your lowest acceptable offer before you answer; ask for the full package in writing.
Send a short thank-you message within a day, mentioning one thing you discussed.
The job is in Omaha, NE. Below is what the official statistics say about living and working there.
How Omaha compares. Among the 40 largest places in Nebraska, Omaha is #1 by population, #3 for remote work (#1 = most), #6 for college degrees (#1 = most), #34 for homeownership (#1 = highest). Its county, Douglas County, is #2 of 93 counties for average pay ($67,868).
The place in numbers
Omaha has 488,837 residents (ACS 2020–2024), about 24.7% of the population of Nebraska. It covers 143 square miles of land, which works out to roughly 3,420 people per square mile. The median age is 35.3, 5% younger than the state median (35.3 against 37.2).
Housing
The median gross rent is $1,187 a month (rent plus utilities), 11% above the state median ($1,187 against $1,072). Over a year that is 19.5% of the median household income. US housing guidance treats housing as affordable when it takes 30% of income or less, so the typical household is under that line. The median home value is $245,500, which is 3.4 times the median household income ($73,201); a ratio under 4 usually means ownership is within reach for many households. 57.4% of households own their home, 14% below the state average (57.4% against 66.5%).
Work and pay
The Omaha, NE-IA metropolitan area has 498,100 jobs in the BLS wage survey, and the median pay across all occupations is $49,660 a year, about the same as the national median ($49,660 against $50,980). The biggest occupation groups are office and administrative support (55,630 jobs, median $47,100); food preparation and serving related (48,260 jobs, median $34,270); sales and related (43,380 jobs, median $37,540). The area is most specialised in personal care and service (1.4 times) and construction and extraction (1.2 times), where the share of workers is above the national share. The best-paying groups with at least 5,000 jobs are management ($108,120) and computer and mathematical ($96,400). In 2026M09 the unemployment rate of Douglas County was 2.6%. 69.0% of residents aged 16 and over are in the labour force. The city lies in Douglas County; its jobs, pay by industry and GDP are on the county page.
Getting around
Among workers, 71.8% drive alone, 1.0% use public transit, 1.7% walk, 15.1% work from home. 5.2% of workers commute 45 minutes or more, 26% below the state average (5.2% against 7.0%). Remote work is more common than in the state as a whole, which widens the set of employers a resident can work for without moving.
People and education
40.1% of adults aged 25 and over hold a bachelor's degree or higher, 16% above the state share (40.1% against 34.6%). 11.3% of residents were born outside the United States, 41% above the state share (11.3% against 8.0%). The poverty rate is 13.5%, 27% above the state rate (13.5% against 10.6%).
Climate
The warmest month is Jul, averaging 78°F (25.5°C), and the coolest is Jan at 23°F (-5.1°C). About 786 mm (31 inches) of precipitation falls in a year; May is the wettest month (121 mm) and Jan the driest (19 mm). These values come from NASA satellite-based climatology on a grid of about 50 km, so they describe the wider area, not a weather station in the city.
Nearby cities to compare
Closest cities in this guide: Ralston (4 miles, similar rent); La Vista (6 miles, rent 11% higher); Chalco (7 miles, similar rent); Papillion (8 miles, rent 7% higher). Rent differences are against Omaha; use the Compare tab to put any two cities side by side.
These links go to official sources and open in a new window. The first one is the government's or company's own site as listed in Wikidata (property "official website"); check it before relying on it.
Where to live
The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.
Career paths
We could not match this title to one occupation, so here are the other sub-niches in Retail, Hospitality and Services, where your skills may carry over:
This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Retail, Hospitality and Services jobs with distances from any of the 20 largest cities.
Company description (from The Muse): Leidos is a Fortune 500® innovation company rapidly addressing the world’s most vexing challenges in national security and health.
size: Large Size; industries: Information Technology; locations on The Muse: Reston, VA.
These links go to official sources and open in a new window. The first one is the government's or company's own site as listed in Wikidata (property "official website"); check it before relying on it.
What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".
What is the Information System Security Officer job at Leidos?
A senior level role in retail, hospitality and services (security, facilities and maintenance) listed 3 days ago. The full description is on this page and on The Muse.
Where is this job?
Omaha, NE.
How do I apply?
Use the "View this job and apply on The Muse" button. AtiveSite does not receive applications.
How much does it pay?
The listing does not publish pay, and we could not match the title to one official occupation.
What is the cost of living there?
Median rent in Omaha is $1,187 a month and median household income $73,201 (ACS 2020–2024).
How old is this listing?
It was posted on 2026-11-06 (3 days ago). Jobs older than 90 days are not shown.
Are there similar jobs?
Yes: browse security, facilities and maintenance jobs in Nebraska.
Sources and terms
Job data: The Muse public API (listing dated 2026-11-06). The job disappears from this site when it disappears from the source.
Wages and projections: BLS OEWS (May 2025) and Employment Projections 2025–35.
City and county figures: Census Bureau ACS 2020–2024, BEA, BLS QCEW and LAUS, NASA POWER climatology; distances from Census Gazetteer coordinates.
AtiveSite is not affiliated with or endorsed by The Muse, the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.