Lead Cybersecurity Engineer/ISSO

Summary: DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment. This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support., * Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.

• Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
• Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
• Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
• Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
• Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
• At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
• Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
• Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
• Active Secret-level clearance.

Desired Qualifications and Certifications:

• CISSP or equivalent strongly preferred.
• Experience supporting biometric, identity intelligence, watchlist, or high-availability mission systems.