Information System Security Officer - ISSO Analyst

SecurePro is seeking a motivated and detail-oriented Information System Security Officer (ISSO) Analyst to support a federal cybersecurity program in Washington, DC. The team provides cybersecurity and compliance support across a portfolio of approximately 32 FISMA Moderate information systems. The ISSO Analyst will work alongside Senior and Lead ISSOs to support Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, Plan of Action and Milestones (POA&M) tracking, security documentation, audit preparation, and federal cybersecurity compliance. This is a hands-on, on-site position designed for an early-career cybersecurity professional looking to develop, * Assist Senior and Lead ISSOs with implementation and maintenance of the NIST SP 800-37 Rev. 2 Risk Management

Framework (RMF) for FISMA Moderate systems.

• Support the development, review, and maintenance of cybersecurity documentation, including System Security Plans

(SSPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), POA&Ms, and supporting assessment evidence.

• Track security vulnerabilities, findings, remediation activities, and POA&M milestones under the direction of senior

cybersecurity personnel.

• Assist with continuous monitoring activities, security control assessments, and compliance reporting.

• Review vulnerability scan results and help track remediation efforts using tools such as Tenable Nessus, Qualys, or

ACAS.

• Support security logging and monitoring activities using Splunk, including reviewing logs and identifying potential

security issues.

• Assist with maintaining cybersecurity authorization and compliance records in CSAM.

experience in federal information security, security assessment and authorization, and compliance operations. The ideal candidate has a foundational understanding of cybersecurity principles, familiarity with NIST security frameworks, strong organizational skills, and a willingness to learn federal cybersecurity processes and technologies., * U.S. citizenship required.

• Ability to obtain and maintain a Tier 4 High Risk Public Trust.

• 1-3 years of experience in cybersecurity, information security, IT security, security compliance, or a related technical

field.

• Foundational knowledge of cybersecurity principles, information security controls, and risk management concepts.

• Basic understanding of NIST SP 800-53 security controls and the NIST Risk Management Framework (RMF).

Preferred Qualifications

• Previous experience supporting a federal government agency, government contractor, or regulated IT environment.

• Exposure to federal cybersecurity compliance, FISMA, RMF, or Assessment and Authorization (A&A) activities.

• Familiarity with CSAM or similar Governance, Risk, and Compliance (GRC) platforms., * Experience or exposure to Splunk, ServiceNow, Tenable Nessus, Qualys, or ACAS.

• Familiarity with SSPs, SARs, POA&Ms, security control assessments, or authorization documentation.

• Understanding of NIST SP 800-37 Rev. 2, NIST SP 800-53, or NIST SP 800-53A.

• Basic knowledge of cloud security concepts, particularly AWS or Microsoft Azure.

• Familiarity with security incident management, log analysis, or vulnerability remediation.

• Experience assisting with cybersecurity audits, compliance reviews, or evidence collection.

• Exposure to Microsoft Defender, Entra ID, Intune, or other enterprise security technologies.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related

field.

• An active cybersecurity certification such as CompTIA Security+, CySA+, ISC2 Certified in Cybersecurity (CC), or

SSCP.

• Active federal Public Trust or security clearance.

Flexible work from home options available.

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance