Sr. Security Specialist (ISSO) (USC)

Title: Sr. Security Specialist (ISSO)

Duration: Full Time Hire

Start: Oct 2026

Location: Washington, DC (Onsite)

Type: W2

***Active TS/SCI Required***

Required Skills

• Cyber Assessment Intermediate
• Cyber Governance and Policies Intermediate
• Cyber Security Intermediate
• Cyber Strategy Intermediate
• NIST Risk Management Framework (RMF) Intermediate

Day-to-Day Responsibilities

• Interact with key Subject Matter Experts (SMEs) and Government Stakeholders while supporting junior ISSOs.
• Manage and support the creation, monitoring, and status updates of POA&Ms to ensure weaknesses are resolved according to scheduled completion dates.
• Support the creation of Waivers and Risk Acceptance Memos to assist in effective system risk management.
• Manage and support the review, creation, and annual update of security authorization documentation within government A&A tools.
• Support annual Contingency Plan testing activities and updates to contingency plans.
• Support system self-assessments as part of the Ongoing Authorization program.
• Monitor and respond to Information Security Vulnerability Management (ISVM) and Patch Management activities.
• Maintain and manage inventory knowledge within the accreditation boundary.
• Support Assessment and Authorization (A&A) planning activities for assigned information systems.
• Ensure Configuration Management processes are followed to prevent the introduction of new security risks and participate in Change Control Boards (CCBs).
• Respond to current and emerging cybersecurity requirements.
• Participate in DevSecOps activities, integrating security into Agile development processes for assigned systems.
• Manage and support ISSO checklist responsibilities, including classified spill cleanup, audit log reviews, and maintenance of privileged user and physical access lists.
• Demonstrate strong experience with the RMF process.
• Perform ad hoc duties as assigned by the ISSM.

Expected Deliverables

• ATO (Authorization to Operate) documentation for systems undergoing the authorization process.

Education Requirements

• Bachelor s degree from an accredited university in Information Systems, Computer Science, Engineering, Management Information Systems, or a related technical field.