> Markdown version of [/jobs/ext/3095087-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/3095087-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer ( ISSO )

- **Company:** Venesco LLC
- **Location:** Aberdeen Proving Ground, MD, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Information Security Management, Software Vulnerability Management, Information Security Management System, SC Clearance, Information Technology, Vulnerability Analysis
- **Published:** September 26, 2026
- **Apply:** https://www.juju.com/job/16_92c5dd89

## About the Role

* Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field preferred
 * Typically, 2-4 years of cybersecurity or information assurance experience
 * Active Secret clearance
 * Relevant DoD 8140 certifications such as CISSP strongly preferred
 * Working knowledge of NIST SP 800-53, and DoD cybersecurity compliance processes
 * Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection
 * Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related compliance tools
 * Strong documentation, analytical, and issue-tracking skills
 * Ability to work with technical and non-technical stakeholders, * Ability to operate in fast-paced, compliance-driven environments
 * Strong judgment in evaluating cyber risk and balancing mission needs
 * Proven ability to build trust with technical teams and senior leadership
 * Detail-oriented approach to documentation, authorization, and continuous monitoring requirements

## Description

We are seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role is responsible for maintaining RMF documentation, supporting continuous monitoring, tracking vulnerabilities, managing POA&Ms, and helping ensure systems remain compliant with DoD and NIST security requirements. ISSOs are typically the hands-on security practitioners closest to the system and its operational controls., * Maintain and update the System Security Plan (SSP) and related RMF artifacts

 * Support continuous monitoring activities, including log review, control checks, and security status tracking
 * Create, update, and track POA&Ms for identified weaknesses and remediation actions
 * Analyze vulnerability scan results and validate DISA STIG compliance findings Support RMF steps including categorization, control implementation, assessment, authorization, and monitoring
 * Maintain system records in eMASS and support package updates
 * Coordinate incident response activities for assigned systems
 * Partner with system owners, admins, engineers, and the ISSM to resolve security issues


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Demystifying Crypto & Web3: A Technical Journey Through 15 Years of Innovation](https://www.wearedevelopers.com/videos/1516-demystifying-crypto-web3-a-technical-journey-through-15-years-of-innovation)

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)