Information Systems Security Officer (ISSO) | On-Site | Contingent
Ares Enterprise, LLC
Fairfax, VA, United States
9 days ago
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Apply on www.thejobnetwork.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source
Tech stack
CompTIA Security+
Cyber Security
Security Content Automation Protocol
Information Security Management System
Information Technology
Nessus
Plan of Action and Milestones
Vulnerability Analysis
Job description
- RMF Lifecycle Management: Lead all aspects of the Risk Management Framework (RMF) process from system categorization and security control selection to implementation, assessment, and authorization, ensuring continuous Authority to Operate (ATO).
- Security Documentation: Develop, maintain, and update vital RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
- eMASS Administration: Manage the system’s security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring data accuracy and prompt workflow approvals.
- Continuous Monitoring: Implement and manage robust continuous monitoring strategies to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
- Stakeholder Coordination: Serve as a primary security advisor to system owners, liaising with Authorizing Officials (AO/AODR) and Program Information Security System Managers (P-ISSM) to navigate the Assessment and Authorization (A&A) process and remediate STIG findings.
- Compliance & COMSEC Support: Assist in developing cybersecurity programs, reviewing external policies, and ensuring adherence to DoD, Army, and NIST regulations.
Requirements
- Experience: Minimum of 5+ years of dedicated, hands-on experience applying RMF to complex Department of Defense (DoD) IT systems.
- Certifications: Must possess current, industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
- Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
- Security Clearance: Must possess and actively maintain a Top Secret/SCI security clearance.
- Citizenship: Must be a U.S. citizen.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on www.thejobnetwork.com
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this role…