> Markdown version of [/jobs/ext/3570265-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/3570265-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information System Security Officer (ISSO) - **Company:** Amentum Services, Inc. - **Location:** Spokane, WA, United States - **Experience:** Experienced - **Salary:** $110,240.0 - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, Configuration Management, Cyber Security, Information Systems, System Configuration, Linux, Firmware, Identity and Access Management, Information Security Management, Local Security Policy, Microsoft Visio, Microsoft PowerPoint, Wide Area Networks, Windows Desktop, Computer Networking Systems, Information Technology, Tenable Nessus, Splunk, Plan of Action and Milestones - **Published:** October 3, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9214428/information-system-security-officer-isso ## About the Role Amentum is seeking an experienced Information System Security Officer (ISSO) in Spokane, WA in support of a Department of War (DoW) customer. In this role, you will ensure required cybersecurity measures are implemented across multiple DoW information systems. You will lead all efforts to establish and maintain Authority to Operate (ATO) approvals for standalone networks, collaborating with cybersecurity counterparts to maintain ATOs for shared Wide Area Networks (WANs). A successful candidate is a highly organized self-starter with strong attention to detail, capable of working independently with minimal supervision or as part of a collaborative, mission-focused team., * Must have an active Top Secret US Government security clearance with SCI eligibility. Note: US Citizenship is required to maintain a Top Secret Clearance. * Must have and be current in at least one of the following certifications to meet DoD 8140 (formerly DoD 8570) for Intermediate ISSM (or IAM Level II): SecurityX/CASP+, CCSP, CCISO, CGRC/CAP, CISSO, Cloud+, GCSA, GSEC, Security+, or SSCP. A bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science can also meet the requirements. Meeting the requirements for Advanced ISSM (IAM III) will also meet the 8140 requirements for Intermediate ISSM. * At least 2 years of previous experience as an ISSO/ISSM, System Administrator, or equivalent cybersecurity role. * Direct hands-on experience developing, submitting, and processing Risk Management Framework (RMF) packages. * Familiarity using any of the following security tools: Splunk, Tenable Nessus, Change Auditor, and Trellix ePolicy Orchestrator (ePO). * Technical and professional writing expertise; high proficiency with MS Office products (Word, Excel, Visio, PowerPoint). * Previous system administration experience, including familiarity with Windows and/or Linux operating systems, system configuration, account management, security settings, patching, and system hardening Preferred Qualifications: * Bachelor's degree in a Cybersecurity or IT-related field. * At least 4 years' previous experience as an ISSO/ISSM or another organizational equivalent. * Active certification meeting DoD 8140 IAM Level III requirements (e.g., CISSP, CISM, or GSLC). * Experience implementing and assessing Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs). Other Requirements: * This is a non-remote, full-time on-site position located in Spokane, Washington. * Standard work schedule is 40 hours per week/8 hours per day with the occasional need to flex hours based on customer support needs. * Some after-hours or short-term shift work may be required to support urgent customer requirements, including weekends and holidays. * Must be able to sit and/or stand for extended periods of time working at a desk or in a mixed-use office/lab environment where the associated IT equipment and networks are present. * Must be able to lift various sizes of materials and equipment (up to 45 lbs). ## Description * Monitor and maintain awareness of changes to DoW/DoD cybersecurity policies, assessing operational impacts and updating local policies accordingly. * Review system security audit logs on standalone and networked systems to identify, investigate, and report anomalous activity. * Manage all network account authorization, access requests, and required user paperwork for standalone networks and WANs within portfolio, ensuring strict compliance with the principle of least privilege. * Utilize Tenable Nessus scanning tools to identify system vulnerabilities and assess STIG compliance. Partner with systems administration and IT teams to remediate and mitigate identified vulnerabilities. * Provide required system cybersecurity and user awareness training to personnel. * Perform annual RMF self-inspections and continuous monitoring assessments for all supported systems. * Develop, update, and maintain Risk Management Framework (RMF) ATO packages and associated artifacts * Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM/AO/AODR through established Configuration Control Boards (CCB). * Ensure systems are operated, maintained, and disposed of in accordance with applicable DoW/DoD and local security policies and procedures. * Support Information System Security Incident Response activities in accordance with DoW/DoD and local Incident Response Plans. * Interface with, brief, and advise system stakeholders on all system security-related matters. * Maintain the Plan of Action and Milestones (POA&M) to track, prioritize, and resolve system security weaknesses.