> Markdown version of [/jobs/ext/3991306-cybersecurity-technical-specialist-level-iii-isso](https://www.wearedevelopers.com/jobs/ext/3991306-cybersecurity-technical-specialist-level-iii-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Technical Specialist Level III / ISSO

- **Company:** Arlo Solutions Llc
- **Location:** Aberdeen Proving Ground, MD, United States
- **Salary:** $76,960
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Microsoft Excel, Microsoft Windows, Systems Engineering, CompTIA Security+, Cyber Security, Information Systems, System Configuration, Linux, Microsoft Software, Network Architecture, Security Content Automation Protocol, Software Vulnerability Management, Information Technology, Software Version Control, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 28, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9271483/cybersecurity-technical-specialist-level-iii-isso

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Engineering, or related field; equivalent experience may qualify when permitted by contract.
 * Demonstrated experience supporting DoD, U.S. Army, or federal cybersecurity programs.
 * Hands-on experience performing ISSO, Risk Management Framework (RMF), information assurance, or equivalent cybersecurity responsibilities.
 * Strong understanding of NIST SP 800-53 security controls, RMF processes, cybersecurity compliance, and authorization requirements.
 * Experience reviewing security-control implementations, technical evidence, vulnerability findings, and cybersecurity documentation.
 * Experience supporting authorization packages, Plans of Action and Milestones (POA&Ms), and Continuous Monitoring.
 * Ability to independently analyze technical cybersecurity issues, validate findings, and produce accurate, defensible deliverables.
 * Strong analytical, organizational, documentation, communication, and problem-solving skills.

Technical Knowledge and Experience

 * Candidates must demonstrate applicable knowledge and practical experience in:
 * DoD RMF: DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable DoD/Army cybersecurity requirements.
 * eMASS: Authorization-package maintenance, security-control documentation, implementation statements, assessment evidence, findings, and workflow support., * Must satisfy applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role, proficiency level, and contract.
 * Relevant certifications may include CompTIA Security+, CySA+, CASP+/SecurityX, CISSP, or other recognized qualifications.
 * Additional operating-system, networking, vendor-specific, and cybersecurity certifications are preferred.
 * Mandatory certifications, education, and experience requirements are determined by the applicable contract, labor category, and designated DoD 8140 work role.

Security Clearance and Installation Access

 * Must meet applicable U.S. citizenship requirements established by the contract.
 * Must possess or qualify for the required Government security clearance and maintain eligibility throughout employment.
 * Must satisfy U.S. Army Aberdeen Proving Ground installation access, identity verification, and credentialing requirements.
 * Must complete required Government cybersecurity awareness, acceptable-use, and security training.
 * Must comply with applicable DoD, Army, ATEC, and installation security policies.
 * Must maintain authorized access eligibility for assigned Government facilities, networks, and information systems.

Additional Employment Requirements

 * Must reside within commuting distance of Aberdeen Proving Ground, Maryland, or be willing to self-relocate.
 * Must work full-time, on-site at the assigned Government installation.
 * Must demonstrate professional conduct, accountability, effective teamwork, and adherence to established operational direction.
 * Must independently validate technical work for accuracy, completeness, and compliance before submission.

Desired Qualifications:

 * Previous experience supporting U.S. Army, ATEC, NETCOM, or other DoD cybersecurity programs.
 * Experience supporting enterprise information systems, network infrastructure, or mission-critical Government environments.
 * Demonstrated ability to interpret and apply DISA STIG requirements and technical vulnerability assessment results.
 * Experience supporting cybersecurity authorization or reauthorization efforts.
 * Experience coordinating technical remediation activities with System Administrators and system engineering teams.
 * Experience supporting Government inspections, cybersecurity assessments, or technical compliance reviews.
 * Familiarity with enterprise vulnerability tracking, reporting dashboards, Microsoft Excel, Microsoft Lists, and other approved cybersecurity management tools.
 * Experience developing technically defensible risk acceptance recommendations and supporting documentation.

## Description

Arlo Solutions seeks an experienced Cybersecurity Technical Specialist III / ISSO to support U.S. Army ATEC cybersecurity operations. The position provides technical expertise in DoD Risk Management Framework (RMF), security-control analysis, vulnerability management, eMASS, POA&M management, and Continuous Monitoring. Candidates must reside near APG or independently relocate before employment.

Full-time, on-site attendance at the Government installation is mandatory. RMF Execution:

 * Perform assigned RMF activities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army requirements.

Security Controls:

 * Analyze control implementations, technical configurations, compliance evidence, and deficiencies
 + develop accurate implementation statements and corrective recommendations.

eMASS Management:

 * Maintain assigned authorization packages, security controls, artifacts, findings, and supporting documentation for ATO/IATT and Continuous Monitoring activities.

Vulnerability Management:

 * Review ACAS, SCAP, STIG, and other assessment results;
 + validate findings, coordinate remediation, and maintain accurate tracking records.

POA&M Management:

 * Document weaknesses, track remediation milestones, validate corrective actions, and maintain supporting evidence and traceability.

Continuous Monitoring:

 * Conduct recurring security reviews, identify emerging risks, monitor compliance, and report material cybersecurity changes.

Technical Quality Assurance:

 * Independently verify technical accuracy, completeness, evidence, and compliance before submitting deliverables.

Incident Coordination:

 * Report significant vulnerabilities, suspected incidents, and security deficiencies through authorized channels.
 * Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders to obtain evidence, validate configurations, resolve findings, and accomplish assigned RMF responsibilities.
 * Maintain operational leadership visibility and communicate progress, obstacles, and cybersecurity risks professionally.
 * Prepare and present accurate technical briefings covering RMF activities, vulnerabilities, security controls, POA&Ms, and Continuous Monitoring.
 * Explain findings, supporting evidence, risks, remediation recommendations, and outstanding actions.
 * Provide timely status updates and identify issues requiring leadership attention.
 * The assigned Team Lead/O-ISSM serves as the primary operational tasking lead, operating under the oversight of the Project Lead, Program Manager, and authorized Government TPOC.
 * Employees must follow reasonable, authorized direction from designated leadership, meet established deadlines, and promptly communicate conflicting instructions, technical concerns, or delays.
 * System assignments do not confer exclusive ownership or independent managerial, ISSM, SCA, or Authorizing Official authority.

Professional Attire:

 * Maintain APG/ATEC-required professional business attire throughout on-site duty hours, subject to approved exceptions.

Professionalism:

 * Demonstrate respect, integrity, accountability, courtesy, and constructive workplace communication.

Customer Relations:

 * Maintain professional Government relationships and follow established communication and escalation procedures.

Teamwork:

 * Collaborate effectively, respect leadership responsibilities, accept constructive feedback, and support mission priorities.

Technical Accuracy:

 * Validate all assigned technical work before submission; promptly correct identified deficiencies.

Policy Compliance:

 * Follow Arlo Solutions Employee Handbook requirements, Government workplace policies, security procedures, and authorized operational direction.

Performance Standard:

 * Deliver accurate, timely, technically defensible cybersecurity work while maintaining professionalism, accountability, effective communication, and continuous support of the U.S. Army ATEC mission., * Execute assigned RMF responsibilities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army cybersecurity requirements.
 * Support system categorization, security-control implementation, assessments, authorization, and Continuous Monitoring.
 * Analyze technical configurations, control implementations, compliance evidence, and cybersecurity documentation. Identify deficiencies, unsupported compliance assertions, and documentation inconsistencies; recommend corrective actions.
 * Support ATO, IATT, reauthorization, and ongoing authorization requirements.
 * Develop, review, maintain, and validate assigned eMASS authorization packages, security controls, implementation statements, assessment evidence, and findings.
 * Ensure documentation accurately reflects system configurations, security posture, and compliance status.
 * Maintain traceability between security controls, supporting evidence, assessment findings, and POA&Ms.
 * Coordinate authorization-package updates, quality reviews, and submissions through established RMF leadership.
 * Evaluate NIST SP 800-53 security controls against documented implementations and technical evidence.
 * Validate findings, identify compliance gaps, distinguish false positives, and assess inherited controls.
 * Develop defensible recommendations for remediation, mitigation, additional assessment, or risk acceptance.
 * Coordinate technical validation with authorized System Administrators and cybersecurity stakeholders.
 * Review ACAS, SCAP, DISA STIG, and other approved vulnerability assessment results.
 * Identify vulnerabilities, configuration weaknesses, affected assets, and compliance deficiencies.
 * Conduct recurring vulnerability reviews and maintain accurate Government-approved tracking records.
 * Develop and maintain POA&Ms documenting findings, risks, remediation milestones, and supporting evidence.
 * Validate remediation before recommending closure; escalate significant unresolved risks.
 * Perform recurring security-control reviews, vulnerability assessments, compliance checks, and cybersecurity reporting.
 * Identify system changes, emerging threats, and conditions affecting authorization or cybersecurity posture.
 * Support Continuous Monitoring documentation, corrective actions, and risk tracking.
 * Promptly report suspected incidents, significant vulnerabilities, and security-control failures through authorized channels.
 * Support incident-response coordination without independently accepting risk or approving exceptions.
 * Prepare accurate, complete, traceable, and technically defensible cybersecurity deliverables.
 * Independently verify technical findings, asset identifiers, control mappings, vulnerability references, and evidence before submission.
 * Correct errors, unsupported assertions, and documentation inconsistencies promptly.
 * Maintain version control, documentation integrity, and compliance with established quality standards.
 * Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders.
 * Coordinate evidence collection, technical investigations, remediation, and RMF activities.
 * Prepare and present technical briefings addressing vulnerabilities, controls, POA&Ms, risks, and authorization status.
 * Communicate progress, blockers, outstanding findings, and corrective recommendations professionally.
 * Maintain leadership visibility and avoid unauthorized commitments.
*, * ACAS assessments, DISA STIG compliance, SCAP scanning, technical findings analysis, and remediation validation.

POA&M Management:

 * Vulnerability documentation, remediation tracking, milestone management, risk acceptance support, and evidence validation.

Continuous Monitoring:

 * Recurring security reviews, vulnerability tracking, cybersecurity posture assessment, and compliance reporting.

Security Control Analysis:

 * Implementation validation, technical risk assessments, compliance evaluation, and corrective-action recommendations.

Enterprise Security:

 * Windows, Linux, networking, system configurations, and enterprise cybersecurity concepts.

Technical Documentation:

 * Accurate cybersecurity reporting, RMF artifact development, quality assurance, and technical briefings.

Certifications and DoD 8140 Compliance