> Markdown version of [/jobs/ext/3038266-isso-remote](https://www.wearedevelopers.com/jobs/ext/3038266-isso-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSO - REMOTE

- **Company:** Zachary Piper
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $150,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cyber Security, Information Systems, Continuous Integration, Platform as a Service (PAAS), Software Vulnerability Management, Cloud Platform System, Kubernetes, Information Technology, Patch Management, Nessus, Plan of Action and Milestones
- **Published:** September 23, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9188119/isso-remote

## About the Role

* 3+ years of experience supporting DoD cybersecurity, RMF authorizations, Information Assurance, or ISSO functions.
 * Hands-on experience with eMASS, CAC authentication, DISA PPSM, ACAS/Nessus, STIGs, NIST 800-53, NIST 800-37, and DoD RMF .
 * Strong understanding of cloud environments, Platform as a Service (PaaS), AWS, containers, Kubernetes, CI/CD pipelines, and modern software delivery environments.
 * Ability to independently author SSPs, POA&Ms, control implementation narratives, and other assessor-ready RMF documentation.
 * Bachelor's degree in Cybersecurity, Information Technology, Information Systems, or a related field (or equivalent experience).
 * Active Security Clearance required.
 * DoD 8570/8140 certification such as Security+ CE, CISSP, or equivalent required (or ability to obtain within 90 days).

## Description

* Manage and maintain DoD RMF authorization packages within eMASS, ensuring systems remain assessment-ready and compliant.
 * Coordinate continuous monitoring activities, including POA&M management, vulnerability remediation tracking, patch management, and compliance reporting.
 * Register and maintain Ports, Protocols, and Services (PPSM) documentation and ensure alignment with DoD security requirements.
 * Partner with engineering teams to map cloud-native technologies, containers, Kubernetes, and CI/CD environments to NIST 800-53 security controls.
 * Serve as the primary cybersecurity liaison for government stakeholders, assessors, ISSMs, and Authorizing Officials during audits, reviews, and authorization activities.


## Related Videos

- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)