Systems Engineering Services is seeking a ISSO Assessor based in the Rockville, MD area. this will require work In Office.

This is a hybrid position based in Rockville, MD (3 days in office / 2 days remote) with a Public Trust clearance requirement.

Key Responsibilities:

Conduct security control assessments in accordance with NIST RMF, NIST SP 800-53, and FedRAMP requirements
Perform vulnerability testing, control validation, and security assessments across federal systems
Document assessment findings, develop POA&Ms, and track remediation efforts
Collaborate with system owners and ISSOs to ensure controls are properly implemented and maintained
Support ATO package development, continuous monitoring activities, and authorization boundary definition
Utilize ServiceNow for ticketing, workflow, and A&A documentation (integration experience highly valued)
Provide recommendations to improve the client s security posture and streamline assessment processes

Required Qualifications:

3+ years of experience performing security assessments or A&A work in a federal environment
Strong working knowledge of NIST SP 800-53, NIST RMF (800-37), and federal authorization processes
Experience with vulnerability scanning, control testing, and POA&M management
Ability to obtain and maintain a Public Trust clearance (U.S. Citizenship required)
Strong written and verbal communication skills with the ability to produce clear, professional assessment documentation
Willingness to work hybrid schedule (3 days onsite in Rockville, MD)

Preferred Qualifications:

Prior experience supporting NIH, HHS, or other health-related federal agencies
Hands-on experience with ServiceNow GRC / ITSM modules for A&A workflows
Familiarity with Tenable, Microsoft Defender for Endpoint, or similar security tools
Experience supporting large portfolios of systems and managing multiple ATOs simultaneously
CISSP, CISM, CAP, or similar security certification

Jake Lutman

Technical Recruiter

Systems Engineering Services

ISSO Assessor

Quick Overview