> Markdown version of [/jobs/ext/2273296-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/2273296-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer

- **Company:** Everforth Apex
- **Location:** Oxon Hill, MD, United States (Remote available)
- **Experience:** Starter
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Configuration Management, CompTIA Security+, Information Security Management, Smartsuite, Software Vulnerability Management, Vulnerability Analysis
- **Published:** August 27, 2026
- **Apply:** https://www.dice.com/job-detail/be948727-a4e0-4149-8748-e27ddef07179

## About the Role

* Must be able to obtain and maintain a DHS/FEMA EOD.
 * Bachelor's degree and 5+ years of relevant experience, or an equivalent combination of education and experience (Associate's & 7 years, Master's & 3 years, or 11 years without a degree).
 * Experience with Risk Management Framework (RMF), FISMA compliance, NIST SP 800-37, and NIST SP 800-53.
 * Experience creating and maintaining SSPs, POA&Ms, and Contingency Plans.
 * Knowledge of DHS 4300 Series requirements.
 * Experience with continuous monitoring and vulnerability management.

Preferred Qualifications

 * Previous experience with DHS or a similar federal agency.
 * Experience with GRC tools such as CSAM, RegScale, or eMASS.
 * Awareness of cloud security concepts (AWS, Azure) and FedRAMP.
 * Relevant security certifications such as CompTIA Security+, CISA, or CISSP.
 * Technical writing and communication skills.

## Description

We are seeking a Junior Information System Security Officer (ISSO) to join our team. In this role, you will support Senior ISSOs with Risk Management Framework (RMF) compliance and system security. You will be responsible for maintaining security documentation, supporting Authority to Operate (ATO) efforts, and conducting risk and vulnerability assessments to ensure federal systems remain compliant and secure., * Execute Risk Management Framework (RMF) activities to support ATO packages and authorization decisions.

 * Implement and assess security controls in accordance with NIST, FISMA, and DHS requirements.
 * Develop, update, and maintain cybersecurity documentation, including System Security Plans (SSPs), Contingency Plans (CPs), Configuration Management Plans (CMPs), and Plans of Action & Milestones (POA&Ms).
 * Support continuous monitoring activities, conduct system assessments, and manage vulnerability remediation efforts.
 * Perform Security Impact Analyses (SIAs) for system changes and deployments.
 * Assist with cloud security and compliance initiatives.
 * Provide documentation for audits and respond to cybersecurity data calls.
 * Analyze Risk Assessment Reports and FISMA scorecard metrics.


## Related Videos

- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [AI for Enterprise Developers - Dr. Damir Dobric](https://www.wearedevelopers.com/videos/1831-ai-for-enterprise-developers-dr-damir-dobric)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)