> Markdown version of [/jobs/ext/2079545-isso](https://www.wearedevelopers.com/jobs/ext/2079545-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSO

- **Company:** TekSynap Corporation
- **Location:** Fort Belvoir, VA, United States
- **Experience:** Experienced
- **Salary:** $110,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Databases, Identity and Access Management, Security Content Automation Protocol, SARS Software Products, SC Clearance, Vulnerability Analysis
- **Published:** August 16, 2026
- **Apply:** https://www.financialjobbank.com/job.asp?id=3355949676&tx=UT545TYI&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Clearance: Active Top-Secret Clearance with SCI eligibility required.
 * DoD 8570/8140 Certification:
 * DoD 8570/8140 IAM Level III
 * DoD 8570/8140 CSSP Auditor equivalent certification
 * Experience: 3-8 years of progressive experience in Information Assurance, RMF, and NIST compliance. 2-5 Years working in a SOC or CSSP environment.
 * Technical Expertise: Extensive, hands-on experience with NIST SP 800-53 (Rev 5 preferred) and DoD RMF processes.
 * Education: BA/BS College degree required., While performing the duties of this job, the employee is regularly required to use hands to handle, feel, touch; reach with hands and arms; talk and hear. The employee is regularly required to stand; walk; sit; climb or balance; and stoop, kneel, crouch, or crawl. The employee is regularly required to lift up to 10 pounds. The employee is frequently required to lift up to 25 pounds; and up to 50 pounds. The vision requirements include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus.

WORK AUTHORIZATION/SECURITY CLEARANCE

 * Must be a US Citizen
 * Must possess and maintain an active Top Secret security clearance with SCI eligibility.

## Description

The CSSP ISSO serves as the authoritative Risk Management Framework (RMF) and compliance subject matter expert supporting the Defense Threat Reduction Agency (DTRA). This role acts as a critical validation bridge between the CSSP Protect Team and the CSSP's subscriber organizations. The ISSO will provide rigorous, specialized validation of cybersecurity artifacts against NIST 800-53 Rev 5 controls requirements to ensure accurate, continuous authorization and risk mitigation from all CSSP subscriber organizations., * Artifact Validation & Quality Assurance: Serve as the final layer of validation for RMF artifacts (e.g., Authorization Boundary Diagrams, HW/SW Lists, Credentialed Scans, SSPs, POA&Ms, SARs, SAPs) collected by Protect Analysts from CSSP subscribers, ensuring all evidence accurately satisfies operational directives.

 * NIST 800-53 Rev 5 Subject Matter Expertise: Map collected artifacts and subscriber security implementations directly to NIST 800-53 Rev 5 control families, ensuring compliance with federal baseline security standards.
 * Cross-Functional Collaboration: Partner closely with CSSP Protect Analysts to translate complex RMF requirements into actionable data-collection requests, bridging the gap between technical cybersecurity operations and formal governance/compliance requirements.
 * Continuous Monitoring Validation: Cross-reference technical vulnerability scan data (ACAS, SCAP, HBSS findings) against subscriber-provided artifacts to ensure that active system weaknesses are accurately documented in current POA&Ms.
 * eMASS Package Maintenance: Verify, review, and assist in managing security control baselines and validation evidence directly within the Enterprise Mission Assurance Support Service (eMASS) database for all subscriber enclaves.
 * Risk Assessment & Mitigation: Evaluate subscriber POA&Ms for accuracy, feasibility, and appropriate risk scoring. Provide clear, actionable feedback to the Protect team and subscribers when artifacts fall short of compliance standards.
 * Audit Readiness & Documentation: Work closely with the CSSP Auditor in maintain highly organized, audit-ready repositories of validated artifacts to support JFHQ-DoDIN operational directives and overarching CSSP Evaluator Scoring Metric (ESM) assessments.


## Related Videos

- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Branch your database like your code:  How schema changes and pull requests go hand in hand](https://www.wearedevelopers.com/videos/350-branch-your-database-like-your-code-how-schema-changes-and-pull-requests-go-hand-in-hand)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)