> Markdown version of [/jobs/ext/2996903-senior-information-system-security-officer-isso-wsmr-new-me](https://www.wearedevelopers.com/jobs/ext/2996903-senior-information-system-security-officer-isso-wsmr-new-me). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information System Security Officer (ISSO) - WSMR, New Me - **Company:** ASRC FEDERAL - **Location:** White Sands, NM, United States - **Experience:** Expert - **Contract:** Contract - **Skills:** Active Directory, Cyber Security, Information Security Management, Public Key Infrastructure, Data Streaming, Systems Architecture, Software Vulnerability Management, Computer Equipment, Information Technology, Nessus, Plan of Action and Milestones, Vulnerability Analysis - **Published:** September 19, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9178357/senior-information-system-security-officer-isso-wsmr-new-me ## About the Role * Bachelor's degree (BA/BS) in Computer Science, Information Technology, Engineering, or a related field or 4 additional years of experience (for a total of 5 years) in lieu of the degree * 5 or more years of hands-on RMF EMASS Authorization duties * Working knowledge of DoD and Army cybersecurity regulations including Army Regulation 25-2, DoD 8140, and DoD RMF policy * Experience with Active Directory account management and STIG/SRG audit processes * Familiarity with the Army Account Validation System (AVS) or equivalent DoD workforce compliance tracking platforms PREFERRED QUALIFICATIONS * Direct experience with eMASS, POA&M and RMF processes and responsibilities * Experience serving as an Enhanced Trusted Agent for PKI hardware token issuance * Experience performing Software Assurance or Hardware Assurance reviews for DoD networks * Familiarity with NSA and Army data sanitization and destruction policy * Experience coordinating Negligent Disclosure of Classified Information or classified spill incident response * CISSP, CASP+, or CISM certification * Experience supporting DEVCOM or Army G6 cybersecurity programs, * Bachelor's degree in Information Technology, Computer Science, or a related field or 4 additional years of experience in lieu of the degree CERTIFICATION * DoDI 8140.03 qualification for DCWF Work Role Information Systems Security Manager (722 Intermediate). Accepted foundational qualifications include certifications mapped to Work Role 722 Intermediate in the current DoD 8140 Qualification Matrix, such as SecurityX, CASP+, CCISO, CCSP, CISSO, Cloud+, Security+, and SSCP. Please include your certificate information on your application. Preferred * CISSP * SecurityX * SSCP ## Description ASRC Federal Technology Solutions LLC, a subsidiary of ASRC Federal, is looking for an experienced Information System Security Officer with a minimum of an active Secret security clearance to support their work with DEVCOM-CBC and the Transformation Decision Analysis Center (TDAC) organization in White Sands Missile Range, NM. This position supports the development, implementation, and maintenance of cybersecurity policies, standards, and procedures, ensuring compliance with applicable Department of Defense (DoD), Army, and DEVCOM CBC regulations. In this role, you will provide cybersecurity support to the DEVCOM-CBC TDAC G6 Cybersecurity Branch, focusing on all aspects of Risk Management Framework (RMF) activities, cybersecurity assessments, and incident response. This role requires a deep understanding of cybersecurity principles, a strong analytical ability, and excellent communication skills to effectively convey complex information to both technical and non-technical audiences, while maintaining a broad portfolio of compliance and accounts management responsibilities across unclassified, classified, and standalone systems., * Maintain current Authority to Operate (ATO) status for DEVCOM systems and provide RMF guidance and support to other ACC locations with similar systems. * Develop, update, and/or modify the system-level artifacts (e.g., TTPs, plans, policies, procedures, hardware/software lists, data flow, system architecture diagrams, PIAs, Ports/Protocols/Services, MOA/MOU, etc...) and ensure they are associated with corresponding controls in eMASS. * Obtain, run, analyze, and import all applicable vulnerability scanners and compliance checkers as required, including STIGs, Nessus/ACAS Scans, etc... * Track and report IAVAs related to DEVCOM systems. * Create, modify, and/or maintain all aspects of the implementation plan and test results, as defined by DOD, Army, NETCOM, and DEVCOM requirements. * Manage Plans of Action and Milestones (POA&M), including development, status updates, milestone tracking, and closure. * Manage assigned network packages within eMASS and maintain accurate, current authorization documentation. * Create, modify, and/or maintain all aspects of CONMON. * Utilize existing or develop custom solutions to facilitate RMF requirements, reduce timelines and provide up-to-date status reporting of compliance * Update and track cybersecurity test results, implementation plans, and risk assessments. * Evaluate STIG checklists and document compliance status, deficiencies, and required remediation actions. * Perform first-response coordination for Negligent Disclosure of Classified Information incidents in accordance with organization SOPs for incident response * Conduct vulnerability management activities, including identifying, tracking, and coordinating corrective actions., * This position primarily operates in a professional office environment at WSMR, New Mexico, working within or alongside the DEVCOM-CBC TDAC Cybersecurity Branch. The role involves extended use of computer equipment and may require the candidate to move between buildings on the installation to support users and coordinate with government staff. Some work may involve access to classified facilities and systems. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this posi tion. ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Why and when should we consider Stream Processing frameworks in our solutions](https://www.wearedevelopers.com/videos/1085-why-and-when-should-we-consider-stream-processing-frameworks-in-our-solutions) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)