> Markdown version of [/jobs/ext/1183971-isso](https://www.wearedevelopers.com/jobs/ext/1183971-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ISSO - **Company:** BlueWater Federal Solutions - **Location:** Philadelphia, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, System Configuration, Information Security Management, Information Systems Security Architecture Professional, Security Information and Event Management, Information Technology - **Published:** July 4, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/13439390?backUrl=%2Fcareer%2F13439390%2FIsso-Pennsylvania-Philadelphia ## About the Role * Bachelor's degree in computer science, information technology, communications systems management, or an equivalent science, technology, engineering & mathematics (STEM) degree from an accredited college or university * 6+ years of experience coordinating and enacting required security changes, within various levels of an organization, ensuring compliance with published policies; conducting cybersecurity vulnerability and threat analysis; and supporting cyber incident-response by isolating potentially effected assets, initial investigation and data collection, through status updates/reporting. * Must have an active Secret clearance * Must have one of the following IAM-II certifications + Certified Authorization Professional (CAP) + CompTIA Advanced Security Practitioner (Continuing Education) (CASP+ CE + Certified Information Security Manager (CISM) + Certified Information Systems Security Professional (CISSP) (or Associate) + GIAC Security Leadership Certification (GSLC) + Certified Chief Information Security Officer (CCISO) + HealthCare Information Security and Privacy Practitioner (HCISPP) ## Description BlueWater Federal is looking for an ISSO to prepare, update, and maintain A&A documentation in eMASS, including POA&Ms, Security Plans, and Continuous Monitoring artifacts to ensure systems remain in compliance with DoDI 8510.01 and Navy cybersecurity policy at the Naval Surface Warfare Center (NSWC), Philadelphia, PA Responsibilities * Collaborate with ISSMs and Navy Qualified Validators to support control implementation, validation, and risk assessments for Navy IT systems throughout their lifecycle. * Track and remediate vulnerabilities using tools such as VRAM; ensure timely resolution or risk acceptance is documented and approved. * Execute the System Level Continuous Monitoring Strategy by reviewing outputs from tools like ACAS and SIEM, updating eMASS records, and escalating concerns as needed. * Maintain awareness of changes to DISA STIGs, NIST guidelines, and Navy policies; ensure system configurations and documentation are kept current and reflect evolving requirements. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Enterprise Linux as Container Images](https://www.wearedevelopers.com/videos/1610-enterprise-linux-as-container-images) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)