> Markdown version of [/jobs/ext/4445512-sr-isso-hybrid](https://www.wearedevelopers.com/jobs/ext/4445512-sr-isso-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. ISSO - Hybrid

- **Company:** Zachary Piper
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Expert
- **Salary:** $145,000 - $205,000
- **Contract:** Permanent contract
- **Skills:** Xacta, Systems Engineering, Cloud Computing Security, Cyber Security, Zero Trust Network Access, Splunk
- **Published:** October 26, 2026
- **Apply:** https://www.careerjet.com/job/usf61d1b1667482a8bcc6ea9ee4d1527c3/eaa

## About the Role

* 18+ years of cybersecurity, security engineering, systems engineering, or related experience.
 * Experience with RMF, accreditation processes, and compliance management.
 * Experience using XACTA and supporting IATT and ATO activities.
 * Proficiency with Splunk.
 * Experience implementing and assessing NIST 800-53 security controls.
 * Experience with ICD 503 and related security frameworks.
 * Experience developing and maintaining SSPs, POA&Ms, SAPs, and assessment documentation.
 * Prior ISSO or ISSE experience.
 * Current Security+ or equivalent IAT Level II/III certification.
 * Active TS/SCI with Active Polygraph., * Experience leading cybersecurity programs and enterprise security initiatives.
 * Strong customer-facing, stakeholder management, and leadership skills.
 * Experience working with ISSMs, SCAs, system owners, and Authorizing Officials.
 * Knowledge of cloud-native security environments.
 * Experience implementing Zero Trust architectures.

## Description

* Conduct security assessments, evaluate compliance posture, and manage RMF activities supporting accreditation efforts.
 * Develop and maintain SSPs, POA&Ms, accreditation documentation, and security artifacts within XACTA.
 * Coordinate IATT and ATO activities with stakeholders, system owners, and Authorizing Officials.
 * Implement, assess, and monitor NIST 800-53 security controls while supporting audit and assessment events.
 * Collaborate with engineers, developers, administrators, and security personnel to maintain compliance and implement risk mitigation strategies, including Zero Trust principles.