> Markdown version of [/jobs/ext/2271445-isso](https://www.wearedevelopers.com/jobs/ext/2271445-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSO

- **Company:** Zachary Piper
- **Location:** Alexandria, VA, United States
- **Experience:** Expert
- **Salary:** $130,000.0 - $150,000.0
- **Contract:** Contract
- **Skills:** Cloud Computing Security, Cyber Security, Information Systems, Information Systems Security Architecture Professional, Zero Trust Network Access, Data Streaming, Software Vulnerability Management, Information Technology, Devsecops
- **Published:** August 27, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9121517/isso

## About the Role

* Active Top Secret Clearance
 * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field (or equivalent experience)
 * Minimum 5 years supporting DoD RMF and Assessment & Authorization activities
 * Experience managing multiple RMF authorization packages and briefing senior Government leadership Excellent analytical, written, verbal, and presentation skills
 * Candidates should meet applicable DoD 8140 Cyber Workforce Qualification Program requirements.

Preferred certifications include :

 * Certified Information Systems Security Professional (CISSP)
 * Certified Information Security Manager (CISM)
 * CompTIA CASP+
 * Certified Cloud Security Professional (CCSP)

## Description

* Serve as the ISSM for multiple DoD information systems supporting OUSW(A&S) mission requirements.
 * Lead all phases of the DoD Risk Management Framework (RMF), including system categorization, control implementation, assessment, authorization, and continuous monitoring.
 * Develop and maintain RMF authorization packages, including System Security Plans (SSPs), Security Assessment documentation, Plans of Action & Milestones (POA&Ms), Continuous Monitoring artifacts, and supporting Body of Evidence (BoE).
 * Coordinate Assessment & Authorization (A&A) activities supporting Authorization to Operate (ATO), Interim Authorization to Test (IATT), Authorization to Operate with Conditions (ATO-C), and system reauthorization.
 * Manage Continuous Monitoring (ConMon), vulnerability management, STIG compliance, security control implementation, and cybersecurity reporting.
 * Conduct cybersecurity risk assessments and provide recommendations supporting Authorizing Official (AO) risk decisions.
 * Coordinate Security Control Assessments (SCAs), validate remediation activities, and ensure timely closure of assessment findings.
 * Review system architectures, authorization boundaries, data flows, and proposed changes to maintain cybersecurity compliance.
 * Provide cybersecurity guidance to Government leadership, Program Managers, engineers, ISSOs, ISSEs, and system administrators.
 * Prepare executive briefings, authorization recommendations, and cybersecurity status reports for senior Government leadership.
 * Support implementation of Zero Trust Architecture (ZTA), cloud security, DevSecOps, reciprocity, inherited controls, and enterprise cybersecurity governance initiatives.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)