> Markdown version of [/jobs/ext/3778051-isso](https://www.wearedevelopers.com/jobs/ext/3778051-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ISSO

- **Company:** Cdit Llc
- **Location:** Scott Air Force Base, IL, United States
- **Experience:** Experienced
- **Contract:** Contract
- **Skills:** Cyber Security, Information Systems, Comptia Pentest+ CE, Software Engineering, Information Technology
- **Published:** October 16, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9246074/isso

## About the Role

* Active Secret orTS clearance
 * 3-5 years ofRMF/ATO experience within DoD or federal environments
 * Hands-onexperience with eMASS
 * Working knowledgeof NIST SP 800-53r5 and DoD RMF processes
 * Demonstratedability to independently author SSPs and manage POA&Ms
Required Certification:

 * DoD 8140.03M DCWFBasic tier certification - CEH
Desired Certification:

 * DoD 8140.03M DCWFIntermediate tier certification - one of: CEH(P), RCCE Level 1, Cloud+, CPTE,FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
Required Education:

 * DoD 8140 InterimEducation Options
Desired Education:

 * Bachelor's degreein Computer Science, Cybersecurity, Data Science, Information Systems,Information Technology, or Software Engineering
Desired:

 * Experience witheMASSer or similar RMF automation tooling
 * Exposure tocloud-hosted or hybrid system authorization boundaries
 * Familiarity withthe DoD RMF Knowledge Service

## Description

* Own theday-to-day security authorization posture of assigned DoD information systems
 * Work within awell-resourced team with dedicated engineering, operations, and architecturesupport
 * Develop expertisein modern RMF tooling including eMASS and eMASSer automation
 * Directly supportmission continuity by managing ATO packages and continuous monitoring programs
 * Grow into asenior GRC role with clear advancement pathways Responsibilities
 * Develop,maintain, and update System Security Plans (SSPs) for assigned systems
 * Manage POA&Msfrom identification through remediation and closure
 * Compile andsubmit Authorization to Operate (ATO) packages
 * Conductcontinuous monitoring activities per established strategy
 * Utilize eMASS forGRC management and RMF workflow tracking
 * Coordinate withISSEs and SecOps to validate control implementations
 * Develop SecurityAssessment Plans (SAPs) and support SAR coordination
 * Draft supplychain risk management plans