Information Systems Security Officer (Remote)

📋 Description

• • As a global leader in cybersecurity, CrowdStrike protects the people, processes, and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large-scale distributed systems, processing almost 3 trillion events per day, and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe, and their lives moving forward. We’re proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation, and a fanatical commitment to our customers, our community, and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
• • CrowdStrike seeks an exceptionally qualified Information Systems Security Officer (ISSO) to establish, maintain, and enhance the security and compliance of our Federal cloud environments. This critical role ensures business continuity with government clients by implementing stringent federal security requirements. The ideal candidate will focus on managing security controls to achieve and sustain Authorization to Operate (ATO) status across multiple federal systems. This position requires a security professional expert in navigating the entire compliance lifecycle, from continuous monitoring to external audits, while maintaining the highest security standards in a highly regulated environment.
• • The ideal candidate will utilize deep proficiency in Python, JavaScript, C, or C++ to architect and implement advanced AI automation pipelines, optimizing critical GRC functions such as control assessments, POA&M management, and compliance reporting across federal authorization frameworks. They will leverage professional-level cloud architecture expertise and experience in FedRAMP and IL-5 environments to engineer secure, GRC automation tools within GovCloud and high-security boundaries. They will translate complex agency security requirements into automated solutions, employing LLM assistance for the rigorous drafting and versioning of SSPs and security narratives to meet evolving FedRAMP 20x mandates.
• • The candidate will operationalize AI compliance frameworks and correlate vulnerability intelligence with NIST SP 800-53 controls, providing real-time audit readiness metrics and accelerating the ATO lifecycle. They will design and deploy autonomous AI agents capable of executing multi-step GRC workflows, including control validation, evidence gathering, risk analysis, and remediation tracking, reducing manual compliance overhead and enabling continuous, intelligent oversight of federal security environments.
• • The ISSO will establish, automate, and maintain the Continuous Monitoring (ConMon) strategy from the System Security Plan (SSP), including scanning, assessment, reporting, and automated remediation of compliance checks and Plan of Action and Milestones (POA&M) activities. They will participate in the vulnerability intelligence on-call rotation for 24/7 expert analysis and rapid response.
• • The ISSO will manage the full Authorization to Operate (ATO) lifecycle, including preparing documentation for initial and continuous security authorizations and acting as the primary point of contact for external compliance. They will coordinate annual Third-Party Assessment Organization (3PAO) audits for successful outcomes. They will manage the POA&M process, perform risk-based security impact analyses, and track vulnerability remediation to verified closure.
• • The ISSO will serve as the expert authority on cloud security architecture, providing guidance and implementing defense-in-depth strategies for federal workloads across various cloud configurations (FedRAMP, DISA, agency requirements). They will develop and maintain cloud security architecture documentation (diagrams, data flows, controls). They will evaluate architectural changes for security impact and guide secure DevSecOps practices in federal clouds.
• • The ISSO will manage the Change Control Board (CCB) and Significant Change Request (SCR) process, providing authoritative security guidance, coordinating stakeholder reviews, and implementing automated workflows. They will perform quality assurance and support quarterly audits of SCRs. They will generate detailed security impact analyses for FedRAMP and DISA change requests.
• • The ISSO will maintain the System Security Plan (SSP) and all security authorization packages, ensuring all security artifacts are accurate and align with FedRAMP and EMASS templates. They will support governance activities, including policy development and system sponsorship. They will coordinate compliance matters with authorizing officials, acting as the primary security advocate.
• • The ISSO will serve as the primary security point-of-contact for incident response, managing resolution from initial detection through root cause analysis and implementing preventative measures. They will strategically coordinate and lead incident response, business continuity, and disaster recovery exercises.
• • The ISSO will manage annual security audit evidence collection and coordination. They will rigorously audit account management, enforce least privilege through monthly access reviews, and oversee DISA whitelisting requests. They will process system deviation requests, including risk assessments and determination of compensating controls.
• • The ISSO will have a Bachelor’s degree (or equivalent experience) in a relevant technical field (Engineering, Computer Science, Cybersecurity, IT); advanced degree preferred. They will have proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes. They must hold a DoD 8140/8570 IAM Level II Baseline Certification (CGRC, CASP+, CISM, CISSP/Associate, or CCISO). They will be eligible for U.S. Citizenship and residency required for work on sensitive government systems.
• • The ISSO will have expert knowledge of NIST SP 800-53, RMF, FedRAMP, and FISMA, with significant hands-on experience implementing and assessing controls in cloud environments (e.g., AWS GovCloud). They will have proven success managing 3PAO audits and maintaining a sophisticated Continuous Monitoring (ConMon) program in federal settings. They will have advanced technical familiarity with modern cloud infrastructure and security tools (e.g., SIEM, Endpoint Security, CI/CD, vulnerability management).
• • The ISSO will have exceptional analytical, communication, and documentation skills essential for a highly regulated environment. They will have experience performing comprehensive cyber architecture reviews, identifying weaknesses, and recommending improvements.
• • Bonus points will be given to candidates with current professional-level AWS Certification (e.g., Solutions Architect, Security Specialist). Proficiency in Python, JavaScript, C, or C++ for developing security automation will also be considered. Proven liaison experience with government customers regarding their security requirements will be a plus. Experience with FedRAMP or Agency authorization processes and package preparation will also be considered.
• • The ISSO will work in a highly regulated environment, requiring the candidate to periodically undergo and pass additional background and fingerprint check(s) consistent with government customer requirements.
• • The ISSO will have the opportunity to work with a talented team of CrowdStrikers who have limitless passion, a relentless focus on innovation, and a fanatical commitment to our customers, our community, and each other. They will have the chance to contribute to a culture of responsible AI adoption, experimentation, and innovation. They will have the opportunity to work on large-scale distributed systems, processing almost 3 trillion events per day, and this traffic is growing daily.
• • The ISSO will have access to comprehensive physical and mental wellness programs, competitive vacation and holidays for recharge, paid parental and adoption leaves, professional development opportunities for all employees regardless of level or role, employee networks, geographic neighborhood groups, and volunteer opportunities to build connections, vibrant office culture with world-class amenities, and great place to work certified across the globe.
• • The ISSO will be part of a company that is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
• • The ISSO will have the opportunity to work with a company that is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law.
• • The ISSO will have the opportunity to work with a company that participates in the E-Verify program and is committed to fair and equitable compensation practices. Placement within the pay range is dependent on a variety of factors including, but not limited to, relevant work experience, skills, certifications, job level, supervisory status, and location. The base salary range for this position for all U.S. candidates is $125,000 - $180,000 per year, with eligibility for bonuses, equity grants, and a comprehensive benefits package that includes health insurance, 401k, and paid time off.
• • The ISSO will have the opportunity to work with a company that is committed to providing detailed information about the U.S. benefits package, please click here for more information.