Information System Security Officer (ISSO) (Need Top secret clearance)

Active TS Experience: Minimum 3 years as an ISSO or in RMF package ownership Education: Bachelor's degree in IT, Cybersecurity, Information Systems, or Computer Science, OR minimum 6 years of IT/cybersecurity experience Location: Washington, DC | 5 days onsite in SCIF

Requirement Overview

Seeking an experienced Information System Security Officer to independently manage the security posture, RMF authorization documentation, continuous monitoring activities, and compliance requirements of assigned DHS Intelligence Enterprise information systems.

The position supports classified and unclassified environments, including Cross Domain Solutions and cloud-hosted systems, in accordance with ICD 503 and DHS 4300C requirements.

Key Responsibilities

• Independently manage security compliance and authorization activities for assigned DHS Intelligence Enterprise information systems.
• Develop, update, and maintain complete RMF authorization packages within approved GRC platforms.
• Maintain SSPs, security assessment documentation, POA&Ms, risk exceptions, waivers, and related authorization artifacts.
• Conduct system security self-assessments against established A&A procedures, security requirements, and applicable control baselines.
• Manage POA&M remediation activities and coordinate corrective actions with system owners and technical teams.
• Perform system audit log reviews at least weekly, respond to NOSC alerts, and ensure recurring vulnerability scanning activities are completed.
• Coordinate system configuration changes through IATT requests and assess potential impacts on existing security authorizations.
• Participate in Configuration Management Board activities when designated.
• Facilitate annual contingency plan testing and support quarterly Cybersecurity Performance Evaluation Model (CPEM) reporting.
• Prepare security compliance reports covering incident response activities, continuous monitoring metrics, risk findings, and POA&M status.
• Support security governance for Cross Domain Solutions, including applicable NCDSMO mandates and Raise the Bar requirements.
• Coordinate with ISSMs, SCAs, Authorizing Officials, and system owners on security authorization activities and identified system risks.
• Perform SCIF Information Security Compliance Representative responsibilities and provide guidance to junior ISSOs.

Mandatory Skills

• NIST Risk Management Framework
• NIST SP 800-37 and NIST SP 800-53
• ICD 503 and DHS 4300C
• ATO package development and maintenance
• SSP, SAP, SAR, POA&M, and risk documentation
• Continuous Monitoring (ConMon)
• Security audit log review
• Vulnerability assessment and remediation tracking
• Cross Domain Solution security and governance
• NCDSMO requirements and Raise the Bar concepts
• Windows, Linux, and cloud security
• Configuration management and authorization impact analysis
• GRC tools and security compliance reporting
• Ability to independently manage multiple assigned systems