Principal Information System Security Officer

What you'll do

• Maintain the authorization package and body of evidence in eMASS, including SSP, control responses, POA&Ms, ConMon reporting, and interconnection agreements.
• Coordinate the package transition from NIST SP 800-53 Rev 4 to Rev 5 and track vulnerability remediation, approved changes, and authorization impacts.
• Work with security engineers, development teams, SCAs, AO staff, and government counterparts; provide surge support and backfill as access allows.

What they ask for

• U.S. citizenship and ability to obtain and maintain TS/SCI clearance with CI polygraph.
• Current DoD 8570.01-M IAM Level II or III certification.
• Experience maintaining RMF authorization packages, BoE, control statements, and POA&Ms in eMASS; working knowledge of applicable RMF and DoD security guidance.
• Bachelor’s degree in Computer Science, Cybersecurity, or a related technical discipline; no experience equivalency applies.

Nice to have

• 7 or more years of relevant experience developing and maintaining RMF authorization packages.
• Experience migrating Rev 4 packages to Rev 5, taking packages to full ATO, classified system authorization, vulnerability scan interpretation, or mentoring.

Pay

$102,200 USD—$173,700 USD (base salary)

Tools

eMASS, NIST SP 800-37, NIST SP 800-53 (Rev 4 and Rev 5), NIST SP 800-53B, NIST SP 800-60, DoDI 8510.01, Azure, AWS

AI focus

Documentation is produced with limited AI/LLM support because many LLMs are not approved to process CUI or above; candidates must write technical documentation independently.