What are the responsibilities and job description for the Classified Information System Security Officer (ISSO) position at Nooks?
ABOUT NOOKS
Nooks is pioneering Classified Infrastructure-as-a-Service (CIaaS) to provide government and industry partners with the fastest, most efficient access to classified infrastructure. We are building a nationwide network of accredited classified spaces and systems, ensuring that the best technologies equip our nation’s warfighters. At Nooks, we value innovation, collaboration, and a service-first mindset.
We seek individuals who thrive in complex environments, challenge the status quo, and are eager to provide rapid, affordable solutions to the classified infrastructure capacity gap to assist all players in the classified ecosystem to deliver better.
ABOUT THE ROLE
Nooks seeks an Information System Security Officer (ISSO) to oversee our Arlington, VA facility. The ISSO will oversee the security, compliance, and operational integrity of multiple classified networks. This role requires expertise in cybersecurity frameworks, system administration, and risk management. The ISSO will ensure compliance with federal cybersecurity policies, coordinate security audits, and act as the primary cybersecurity lead for classified systems. As Nooks grows, this position will evolve into a leadership role, providing mentorship and technical guidance to junior cybersecurity professionals.
KEY RESPONSIBILITIES:
- Serve as the site ISSO, ensuring classified networks comply with security frameworks (NIST, ICD 503, CNSS, etc.).
- Develop and implement security policies, procedures, and best practices.
- Coordinate with government cybersecurity experts to ensure proper approvals and Risk Management Framework (RMF) implementation.
- Conduct risk assessments, vulnerability assessments, and continuous monitoring.
- Prepare and maintain security documentation, including ATO packets, SSPs, POA&Ms, and risk assessments.
- Act as the primary point of contact for security audits and assessments.
- Monitor system logs and audit classified environments for security threats.
- Lead incident response efforts, including detection, analysis, and remediation.
- Collaborate with IT and cybersecurity teams to maintain system confidentiality, integrity, and availability.
- Provide cybersecurity training and guidance to staff.
REQUIRED QUALIFICATIONS:
- 7 years of cybersecurity experience in classified networks, ISSM/ISSO roles.
- Strong background in system administration (Windows/Linux, networking, virtualization).
- Deep knowledge of federal cybersecurity policies & frameworks (NIST, DAAPM, RMF, etc.).
- Experience with security tools (SIEMs, IDS/IPS, vulnerability scanners).
- Strong understanding of network security protocols, firewalls, and encryption.
- Proven experience securing multi-site IT infrastructures in high-security environments.
Bachelor’s degree in Cybersecurity, IT, or related field.
PREFERRED QUALIFICATIONS:
- Cybersecurity certifications (Security , CISA, CCSP, etc.)
- Comfortable with “Greenfield projects”
- Experience with cloud security and hybrid network environments.
- Familiarity with Configuration Management (CM) tools and automated patch management.
- Incident response and digital forensics experience in classified environments.
- Experience with Top Secret and Special Access Programs (SAP) networks.
COMPENSATION
- This role is between $125,000-$150,000 base salary
- Yearly Bonus Structure
- Equity Ownership in company
- Medical, Dental and Vision benefits
- Health Savings Accounts
- Life Insurance
- 401k Employer Contribution Plan
- Flexible PTO Policy
ELIGIBILITY CLEARANCE
You must be a U.S. Citizen with Active DoD Top Secret Clearance.
Salary : $125,000 - $150,000
