> Markdown version of [/jobs/ext/1449497-information-system-security-officer-senior](https://www.wearedevelopers.com/jobs/ext/1449497-information-system-security-officer-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer - Senior

- **Company:** ECS Corporate Services, LLC
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $128,000.0 - $143,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Security Management, Software Vulnerability Management
- **Published:** July 26, 2026
- **Apply:** https://www.disabledperson.com/jobs/73866522-information-system-security-officer-senior

## About the Role

This role requires a senior cybersecurity professional with experience supporting RMF, assessment and authorization, continuous monitoring, security documentation, vulnerability tracking, and compliance reporting in federal environments. The ideal candidate will bring strong attention to detail, documentation discipline, risk awareness, customer communication skills, and the ability to collaborate with cybersecurity, engineering, operations, program leadership, and government stakeholder teams in a classified or sensitive federal mission environment.

 * Minimum 7 years cybersecurity compliance, ISSO, or RMF experience
 * Experience with NIST RMF, FISMA, security documentation, POA&Ms, and continuous monitoring.

## Description

Everforth ECS Federal is seeking a Senior Information System Security Officer to support a mission-focused federal IT program in Washington DC.

Please Note: This position is contingent upon contract award.

Salary Range: $128,000 - $143,000

Join Everforth ECS Federal to protect mission-critical federal systems through strong RMF, assessment and authorization, and continuous monitoring practices. You will support national security and law enforcement programs in a collaborative cybersecurity environment focused on security discipline, compliance readiness, risk reduction, and mission assurance.

The Senior Information System Security Officer will manage system security compliance, assessment and authorization documentation, continuous monitoring activities, POA&Ms, security control evidence, and federal cybersecurity reporting requirements. This role supports RMF execution, audit readiness, vulnerability management coordination, and compliance activities for federal mission systems operating in secure environments.

The Senior Information System Security Officer will maintain System Security Plans, Security Assessment Reports, Risk Assessment Reports, POA&Ms, control evidence, vulnerability reporting, audit support materials, and compliance documentation. This position will coordinate remediation activities, support continuous monitoring updates, track security findings, work with technical teams to gather evidence, and help ensure systems remain aligned with federal security requirements and mission needs.


## Related Videos

- [Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes](https://www.wearedevelopers.com/videos/498-don-t-be-a-naive-developer-how-to-avoid-basic-cybersecurity-mistakes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What is the real price of one successful line of code?](https://www.wearedevelopers.com/videos/1921-what-is-the-real-price-of-one-successful-line-of-code)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)