> Markdown version of [/jobs/ext/4608215-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/4608215-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer ISSO

- **Company:** ECS Federal, LLC.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Microsoft Windows, Active Directory, Amazon Web Services, User Authentication, CompTIA Security+, Cyber Security, Information Systems, Linux, Monitoring of Systems, Identity and Access Management, Information Security Management, Internet Security, Network Security, Software Vulnerability Management, Data Logging, Cloud Platform System, Grafana, SC Clearance, Containerization, Kubernetes, Information Technology, Nessus, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** November 6, 2026
- **Apply:** https://www.careerbuilder.com/job-details/information-system-security-officer-isso-washington-dc--65527ca3-1b68-4982-bc97-e62c495edc19

## About the Role

Computer Security, United States Citizen, Secret Clearance, CompTIA Security+, DoD Directive 8140, IAT - Information Assurance Technical, DoD Directive 8570, On Site Support, Internet Security, Information Technology & Information Systems, * U.S. Citizen.

 * Ability to obtain Secret clearance (active preferred)
 * Active DoD 8140 IAT Level II Security+ (or higher).
 * Ability to work up to 3 days a week in a hybrid capacity out of Fairfax, VA. Additional onsite support may be required based on operational or mission needs.
 * Minimum 5 years of relevant cybersecurity experience, including experience supporting DoW information systems, RMF, security authorization, or continuous monitoring activities.
 * Hands-on experience with DoD RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring activities.
 * Working knowledge of AWS security and compliance concepts, including cloud shared responsibility, inherited controls, identity and access management, logging, network security, and security control implementation within cloud environments.
 * Practical understanding of secured IT infrastructure, including AWS, Kubernetes, Linux, Windows, Entra ID/Active Directory, networking, authentication, endpoint security, logging, and monitoring, with the ability to evaluate how these technologies affect the system's security and authorization posture.
 * Ability to develop and maintain cybersecurity documentation including System Security Plans, control implementation statements, POA&Ms, risk documentation, policies, procedures, SOPs, and continuous monitoring artifacts.
 * Hands-on experience with ACAS/Nessus, including credentialed scanning, vulnerability analysis, scan configuration, troubleshooting scan coverage or authentication issues, and targeted vulnerability assessments.
 * Ability to analyze DTOs, CVEs, cybersecurity directives, and vulnerability notifications and independently determine potential system exposure using ACAS/Nessus and other available technical information.
 * Experience reviewing and validating DISA STIGs, security configuration evidence, remediation documentation, mitigations, and vulnerability closure evidence.
 * Ability to work directly with cloud, system, network, and application engineers to validate technical security controls, investigate findings, determine remediation approaches, and collect sufficient evidence to support RMF requirements.
 * Ability to translate technical vulnerabilities and control deficiencies into clear mission and cybersecurity risk statements for ISSMs, system owners, government stakeholders, and Authorizing Officials.
 * Strong analytical, problem solving, technical writing, and verbal communication skills, with the ability to independently investigate cybersecurity issues and communicate effectively with both technical and non-technical stakeholders.
 * Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
 * Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).
 * Active Secret clearance.
 * Experience supporting a system through an initial IATT and/or ATO, including development of authorization artifacts from the ground up.
 * Familiarity with Kubernetes security and compliance, including containerized workloads, cluster security, logging, and vulnerability management.
 * Experience with security and monitoring technologies such as Trellix, Elastic, Grafana, Loki, AWS-native security services, or similar tools.
 * Prior experience supporting DISA programs and working directly with government cybersecurity stakeholders, assessors, or Authorizing Officials.
 * Strong technical writing skills, including development of control implementation statements, risk and mitigation narratives, POA&M closure justifications, policies, procedures, and ATO documentation.