> Markdown version of [/jobs/ext/3040184-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/3040184-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer (ISSO) - **Company:** Zachary Piper - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $140,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Continuous Integration, Identity and Access Management, Package Management Systems, Data Streaming, Cloud Platform System, Containerization, Kubernetes, Information Technology, Nessus - **Published:** September 23, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9186036/information-systems-security-officer-isso ## About the Role * 3-5 years of experience supporting DoD cybersecurity, RMF authorizations, information assurance, or ATO package management. * Hands-on experience with eMASS, DISA PPSM, NIST 800-53, NIST 800-37, ACAS/Nessus, STIGs, and DoD cybersecurity policies. * Experience supporting cloud environments, containers, Kubernetes, CI/CD pipelines, and continuous monitoring programs. * Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, Computer Science, or a related field (or equivalent experience). * Active Secret Security Clearance required with eligibility obtain a higher clearance. * Active DoD 8570/8140 IAM Level I or IAT Level II certification required (Security+ CE, CISSP, or equivalent), or the ability to obtain within 90 days of hire. * Active CAT Card required. ## Description * Execute and maintain all phases of the DoD RMF lifecycle, including categorization, implementation, assessment, authorization, and continuous monitoring activities. * Build, manage, and maintain authorization packages within eMASS, ensuring documentation remains current and audit-ready. * Manage DISA PPSM registrations and maintain accurate ports, protocols, services, and data flow documentation. * Author and maintain SSPs, POA&Ms, security control narratives, and supporting accreditation artifacts. * Partner with engineering teams to remediate vulnerabilities, validate STIG compliance, support assessments, and map cloud-native technologies to NIST 800-53 security controls. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)