> Markdown version of [/jobs/ext/3974680-information-systems-security-officer-isso-on-site-contingent](https://www.wearedevelopers.com/jobs/ext/3974680-information-systems-security-officer-isso-on-site-contingent). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Systems Security Officer (ISSO) | On-Site | Contingent

- **Company:** Ares Enterprise, LLC
- **Location:** Fairfax, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** CompTIA Security+, Cyber Security, Security Content Automation Protocol, Information Security Management System, Information Technology, Nessus, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 27, 2026
- **Apply:** https://www.thejobnetwork.com/job/09563051-2191-4f1e-bab0-8f367368a5b9/information-systems-security-officer-isso-onsite-contingent

## About the Role

* Experience: Minimum of 5+ years of dedicated, hands-on experience applying RMF to complex Department of Defense (DoD) IT systems.
 * Certifications: Must possess current, industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
 * Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
 * Security Clearance: Must possess and actively maintain a Top Secret/SCI security clearance.
 * Citizenship: Must be a U.S. citizen.

## Description

* RMF Lifecycle Management: Lead all aspects of the Risk Management Framework (RMF) process from system categorization and security control selection to implementation, assessment, and authorization, ensuring continuous Authority to Operate (ATO).
 * Security Documentation: Develop, maintain, and update vital RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
 * eMASS Administration: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring data accuracy and prompt workflow approvals.
 * Continuous Monitoring: Implement and manage robust continuous monitoring strategies to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
 * Stakeholder Coordination: Serve as a primary security advisor to system owners, liaising with Authorizing Officials (AO/AODR) and Program Information Security System Managers (P-ISSM) to navigate the Assessment and Authorization (A&A) process and remediate STIG findings.
 * Compliance & COMSEC Support: Assist in developing cybersecurity programs, reviewing external policies, and ensuring adherence to DoD, Army, and NIST regulations.