> Markdown version of [/jobs/ext/2294440-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/2294440-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer (ISSO) - **Company:** Soliel LLC - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $120,000.0 - $135,000.0 - **Contract:** Contract - **Skills:** Cyber Security, Identity and Access Management, Navsea, Information Technology, 3-tier Architectures - **Published:** August 29, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9126978/information-systems-security-officer-isso ## About the Role * 8-10+ years of practical hands-on experience in cybersecurity, A&A, or RMF compliance (preferably as a Navy Validator, ISSE, or Senior ISSO/ISSM). * Expert knowledge of Navy IT sites, systems, infrastructure, eMASS, and phases of the RMF process across RDT&E, PIT, and Business IT environments. * Active IAM or IAT Level III baseline certification in accordance with DoD 8570.01-M / DoD 8140 (e.g., CISSP, CISM, CASP+ CE, CISA, GCED, GCIH, or GSLC). * Clearance: Active SECRET security clearance (Top Secret eligible) with Interim or Final IT-II access eligibility. Must hold a favorably adjudicated Tier 3 (T3) investigation within scope. * Communication & Briefing: Exceptional writing skills for documenting findings, paired with strong oral presentation skills to brief senior SCA/AO stakeholders. * Leadership Aptitude: Natural inclination toward process improvement, task organization, and a desire to gradually absorb project/team management duties over time. EDUCATION: * BS in Business, Information Technology, Computer Science, or other related areas. * Active PMP certification (preferred) ## Description Soliel LLC is seeking a Senior Information Systems Security Officer (ISSO) to support a high-visibility federal program with the Department of Navy In this role, you will perform headquarters-level Risk Management Framework (RMF) Assessment and Authorization (A&A) reviews while serving as a senior technical SME. This position is ideal for an experienced A&A practitioner who wants to maintain their hands-on cybersecurity expertise while naturally stepping into task management, workflow coordination, and client-facing leadership-offering a seamless path toward future Project Management and team lead roles., * RMF Package Review & Technical Execution: Perform expert-level RMF package evaluations for Navy RDT&E, PIT, and Business IT systems within a strict 5-business-day turnaround window. * Compliance & Quality Control: Review System Security Plans (SSPs), security control baselines, and SAR artifacts to maintain strict alignment with NAVSEA Standard Operating Procedures (SOPs) and Navy guides. * Process & Workflow Optimization: Identify operational bottlenecks in the review queue and implement automation or tool-driven solutions to optimize workflow efficiency. * Stakeholder Engagement & Briefings: Facilitate collaboration meetings and present authorization recommendations directly to senior SCA representatives, AO representatives, and system owners. * Workload Coordination & Mentorship: Assist with tracking daily queue metrics, coordinating task assignments across a remote review team, and providing guidance to junior analysts as you expand into leadership responsibilities. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)