> Markdown version of [/jobs/ext/1973743-information-security-systems-officer-isso](https://www.wearedevelopers.com/jobs/ext/1973743-information-security-systems-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Systems Officer (ISSO) - **Company:** CACI International Inc. - **Location:** Reston, VA, United States - **Experience:** Experienced - **Salary:** $75,200.0 - $158,100.0 - **Contract:** Contract - **Skills:** Cyber Security, Information Systems, Comptia Pentest+ CE, Software Engineering, Information Technology - **Published:** August 7, 2026 - **Apply:** https://www.techcareers.com/job.asp?id=3342432526&tx=JT10193UTI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54 ## About the Role * Active Secret or TS clearance * 3-5 years of RMF/ATO experience within DoD or federal environments * Hands-on experience with eMASS * Working knowledge of NIST SP 800-53r5 and DoD RMF processes * Demonstrated ability to independently author SSPs and manage POA&Ms * DoD 8140.03M DCWF Basic tier certification - CEH * DoD 8140 Interim Education Options Desired: * Experience with eMASSer or similar RMF automation tooling * Exposure to cloud-hosted or hybrid system authorization boundaries * Familiarity with the DoD RMF Knowledge Service * Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering * DoD 8140.03M DCWF Intermediate tier certification - one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security- ## Description * Own the day-to-day security authorization posture of assigned DoD information systems * Work within a well-resourced team with dedicated engineering, operations, and architecture support * Develop expertise in modern RMF tooling including eMASS and eMASSer automation * Directly support mission continuity by managing ATO packages and continuous monitoring programs * Grow into a senior GRC role with clear advancement pathways Responsibilities * Develop, maintain, and update System Security Plans (SSPs) for assigned systems * Manage POA&Ms from identification through remediation and closure * Compile and submit Authorization to Operate (ATO) packages * Conduct continuous monitoring activities per established strategy * Utilize eMASS for GRC management and RMF workflow tracking * Coordinate with ISSEs and SecOps to validate control implementations * Develop Security Assessment Plans (SAPs) and support SAR coordination * Draft supply chain risk management plans * Support the Cybersecurity Architect with RMF strategic planning ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Giving AI eyes: How to build a dashboard you can't see](https://www.wearedevelopers.com/videos/100193-giving-ai-eyes-how-to-build-a-dashboard-you-can-t-see) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 216: CyberSec + Mythos, Stack Overflow for Agents & DOOM in TTF](https://www.wearedevelopers.com/magazine/728-dev-digest-216-cybersec-mythos-stack-overflow-for-agents-doom-in-ttf)