> Markdown version of [/jobs/ext/3038950-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/3038950-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer

- **Company:** Zachary Piper
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $150,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Engineering, Cyber Security, Kubernetes, Tenable Nessus, Vulnerability Analysis
- **Published:** September 23, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9188120/information-systems-security-officer

## About the Role

* 3+ years of experience supporting DoD cybersecurity, RMF, Information Assurance, or Authorization to Operate (ATO) initiatives
 * Active DoD Secret Security Clearance required; higher-level clearances preferred
 * Active Common Access Card (CAC) available on Day 1
 * Security+ CE, CISSP, CASP+, CISM, or equivalent DoD 8570/8140 certification required or ability to obtain within 90 days
 * Hands-on experience maintaining and managing eMASS authorization packages and executing RMF deliverables
 * Experience with DISA PPSM, NIST 800-53, NIST 800-37, STIGs, ACAS, IAVM requirements, and DoD continuous monitoring programs
 * Strong understanding of cloud and infrastructure environments, including AWS, containers, Kubernetes, and CI/CD technologies
 * Experience translating technical requirements into security controls, control implementations, and assessor-ready documentation

## Description

The Information Systems Security Officer (ISSO) will support and maintain DoD authorization efforts, execute RMF activities, manage security documentation, and collaborate with engineering teams to ensure compliance across cloud-based environments.

Information Systems Security Officer (ISSO) Responsibilities:

 * Execute and maintain DoD RMF lifecycle activities, including authorization and continuous monitoring efforts for IL4/IL5 environments
 * Build, maintain, and update eMASS authorization packages, SSPs, POA&Ms, security control narratives, and supporting accreditation artifacts
 * Manage DISA PPSM registrations and ensure compliance with ports, protocols, services, and boundary documentation requirements
 * Review vulnerability scans, STIG compliance results, patching efforts, and remediation activities utilizing tools such as ACAS/Tenable Nessus
 * Partner with engineering teams to translate technical requirements into security controls and documentation across AWS, Kubernetes, containers, CI/CD pipelines, and modern cloud infrastructure


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)