Information Systems Security Officer

Information System Security Officer (ISSO), Mid-Level
Cybersecurity Engineering & DoD RMF Support

Location: On-site, Aberdeen, MD (no remote work)
Clearance required: Secret Clearance

What You Will Do

• Perform RMF analysis, planning, and execution for client systems, covering categorization, control selection, implementation support, assessment, authorization, and continuous monitoring
• Establish and maintain system ATOs, including developing and updating authorization package artifacts (System Security Plans, security assessment documentation, Plans of Action and Milestones, and supporting system documentation)
• Categorize systems and select and tailor security controls, applying the applicable baselines and overlays
• Coordinate with system owners, engineers, security control assessors, and the information system security manager to implement and validate security controls
• Run continuous monitoring: review vulnerability scan results, track STIG compliance, manage POA&M remediation, and support ongoing authorization
• Review system changes and assess their security impact to protect ATO status
• Provide cybersecurity engineering support, including secure configuration and hardening guidance for the client’s systems
• Maintain accurate, audit-ready compliance documentation and support inspections and reviews
• Brief technical and program stakeholders on risk, compliance status, and remediation priorities

What You Need

• Active Secret clearance
• Ability to work on-site in Aberdeen, MD for the full contract
• Mid-level experience in cybersecurity or information assurance with hands-on DoD RMF work (suggested minimum 5 years; confirm with the client)
• Working knowledge of the DoD RMF, NIST SP 800-37 and 800-53, and DoD cybersecurity policy
• Experience building and maintaining ATO packages from start to finish
• Experience analyzing vulnerability scan results and managing POA&Ms
• Familiarity with DISA STIGs and secure configuration baselines
• Strong written and verbal communication skills
• A DoD 8570/8140 baseline certification (for example Security+ CE, CASP+, CISSP, or CISM; confirm the required level with the client)

Preferred

• Experience supporting Army or other DoD test, engineering, or non-traditional systems
• Experience with DoD RMF management tools such as eMASS
• Bachelor’s degree in a technical field, or equivalent experience
• CISSP, CISM, or CAP