> Markdown version of [/jobs/ext/2007994-lead-cybersecurity-engineer-isso](https://www.wearedevelopers.com/jobs/ext/2007994-lead-cybersecurity-engineer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Cybersecurity Engineer/ISSO

- **Company:** Inc. (dsa)
- **Location:** Morgantown, WV, United States
- **Experience:** Expert
- **Salary:** $120,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Amazon Web Services, Cloud Computing, Cyber Security, Information Systems, Release Management, Zero Trust Network Access, Security Content Automation Protocol, Security Information and Event Management, Software Vulnerability Management, Data Logging, Microsoft Power Automate, Information Technology, Devsecops, Plan of Action and Milestones
- **Published:** August 9, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/87991078/1

## About the Role

* Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
 * At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
 * Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
 * Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
 * Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
 * Active Secret-level clearance.

Desired Qualifications and Certifications:

 * CISSP or equivalent strongly preferred.
 * Experience supporting biometric, identity intelligence, watchlist, or high-availability mission systems.

## Description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution., Summary: DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment. This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support., * Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.

 * Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
 * Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
 * Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
 * Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
 * Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.


## Related Videos

- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)