Apply on Employer Site

Los Alamos National Laboratory · 3 days ago

Information System Security Officer (Cybersecurity Technical Staff 3)

Los Alamos, NM

Full-time

Onsite

Senior Level, Lead/Staff

8+ years exp

Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. They are seeking a Cybersecurity Technical Staff (CTS-3) professional to serve as the primary Information System Security Officer (ISSO) responsible for leading cybersecurity operations and ensuring compliance with federal standards for classified systems.

Security

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Serving as the primary ISSO for DOE-IN or Strategic Partner information systems

Leading and managing System Security Plans (SSPs), Authorization to Operate (ATO) packages, and related accreditation documentation

Developing innovative cybersecurity solutions and strategies for threat and vulnerability mitigation

Applying and enforcing NIST RMF, ICD 503, and JSIG standards across systems and projects

Managing cyber incident response operations and post-event forensics in high-stakes environments

Directing cybersecurity architecture planning and control implementation efforts

Leading security architecture design reviews and contributing to enterprise-wide cybersecurity strategy

Conducting root cause analysis for security incidents and compliance gaps

Providing mentorship and technical oversight to junior cybersecurity staff (CTS-1 and CTS-2)

Representing LANL cybersecurity requirements in interagency and stakeholder engagements

Advising on policy development, governance, and tool evaluation for cybersecurity program improvements

Qualification

NIST RMFCybersecurity programsAuthorization packagesVulnerability managementIncident responseAWS Security ServicesSecure systems engineeringCybersecurity governanceAnalytical skillsLeadershipMentorshipWritten communication

Required

Expert-level knowledge of NIST Risk Management Framework (RMF), ICD 503, JSIG, and related federal cybersecurity standards

Proven ability to lead and execute cybersecurity programs supporting classified systems

Experience developing and maintaining comprehensive authorization packages, including SSPs, POA&Ms, and ATO documentation

Deep understanding of secure systems engineering and information assurance principles

Mastery of vulnerability management, threat modeling, and enterprise cyber defense

Experience conducting security assessments, compliance audits, and risk analysis

Demonstrated leadership in incident response, risk communication, and stakeholder engagement

Strong analytical, organizational, and written communication skills

Ability to lead multidisciplinary teams and effectively manage competing priorities in high-consequence environments

Position requires a Bachelor's degree in a technical field (e.g., Computer Science, Cybersecurity, Information Systems) and a minimum of 8 years of related experience, or an equivalent combination of education and experience directly related to the occupation

Preferred

Cloud Security & AWS Expertise: Knowledge of secure deployment and operations in classified cloud environments, including AWS Classified Regions (Secret and Top Secret). Familiarity with C2E (Commercial Cloud Enterprise) architectures, compliance processes, and governance structures

AWS Services & Automation: Experience using AWS security services (e.g., IAM, GuardDuty, CloudTrail, KMS) and infrastructure automation tools (CloudFormation, Terraform, or similar)

Secure Systems Integration: Knowledge of cross-domain solutions (CDS), multi-cloud integration, and data flow protections for classified workloads

Cybersecurity Governance: Familiarity with DOE, DoD, and Intelligence Community (IC) cybersecurity directives and governance processes

Leadership and Mentorship: Proven experience mentoring technical staff, leading teams, and managing cybersecurity projects in mission-critical environments

Technical Innovation: Demonstrated ability to identify, evaluate, and deploy emerging cybersecurity tools and technologies

Certifications: CISSP, CAP, CISM, or comparable professional cybersecurity certification preferred

Clearance: Active DOE Q or DoD Top Secret clearance with SCI eligibility