Information System Security Officer (ISSO)

What you'll do

• Develop, manage, and maintain A&A documentation, including SSPs, SCTMs, and POA&Ms.
• Support RMF activities and continuous monitoring, including control reviews, audits, vulnerability scans, and penetration-test report reviews.
• Track vulnerabilities and remediation, maintain security-system records, and brief stakeholders on cybersecurity posture.

What they ask for

• 5+ years of relevant Cyber experience and experience leading a team of Cyber individuals.
• Experience assessing technical environments and translating security controls into NIST SP 800-53 narratives and ATO documentation; hands-on eMASS or Xacta experience across the full system lifecycle.
• Experience as an RMF Engineer, ISSO, and/or information assurance engineer; familiarity with a cloud service offering from AWS, Azure, or Google GCP.
• Experience with NIST 800-53 Rev5, CNSSI 1253, and Air Force risk management policies/procedures; B.A. or B.S. in a related discipline, or 3 years of equivalent industry experience; US Citizenship and TS/SCI security clearance.

Nice to have

• Knowledge of the Air Force A&A process and requirements and DoD DevSecOps Fundamentals Playbook.
• Knowledge of SIEM tools such as Splunk/Elastic; experience with DoD Fast Track ATO Handbook and Air Force Continuous ATO Playbook methodologies.

Pay

$140,000.00 - $160,000.00 USD base salary

Tools

eMASS, Xacta, AWS, Azure, Google GCP, NIST 800-53 Rev5, CNSSI 1253, Splunk/Elastic