> Markdown version of [/jobs/ext/4636258-information-system-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/4636258-information-system-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer (ISSO)

- **Company:** Inc. (dci)
- **Location:** Aberdeen Proving Ground, MD, United States
- **Experience:** Experienced
- **Salary:** $100,000 - $150,000
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, Information Security Management, Security Content Automation Protocol, Cloud Platform System, Information Technology, Tenable Nessus, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** November 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=52b50dc2ca9b9b95

## About the Role

Strong hands-on ISSO experience

2+ years experience directly supporting a customer's ATO/RMF process

Proficiency in interpreting and communicating government policy to a diverse audience

Hands-on experience throughout all steps of the RMF process

Experience with eMASS and/or XACTA

Experience with ACAS and SCAP

Specific experience working in both on prem and cloud environments

 * Such as Amazon Web Services (AWS)

Experience accrediting IT systems against U.S. Government standards including:

 * NIST SP 800-53, CNSSI 1253
 * DISA STIGs
 * DOD RMF, ICD 503, or DIACAP
 * Active DOD 8140 or 8570 Certification (e.g. CISSP or Security+)

Active DoD TS/SCI Clearance, * ISSO: 5 years (Preferred)

 * working through all steps of the RMF process : 5 years (Preferred)
 * eMASS and/or XACTA : 3 years (Preferred)
 * ACAS and SCAP: 3 years (Preferred)

Security clearance:

 * Top Secret (Required)

## Description

Serve as an ISSO

Collaborate with other engineers to:

 * Ensure security policies and settings are in place
 * Build standardized security documentation
 * Generate evidence of compliance once settings have been applied
 * Analyze software
 * Interpret security requirements
 * Plan effective control implementations

Take direct ownership of the Authorization to Operate (ATO) process

Achieve ATOs for software across multiple government customers

Provide outstanding customer service, policy expertise, and high-quality documentation

Serve as the primary in-person point of contact for one or more Government customers

Answer any government cybersecurity and compliance requirement questions

Manage a Plan of Actions and Milestones (POA&M) for remediation of findings

Independently interpret the findings of vulnerability scanning utilities such as:

 * ACAS (Tenable Nessus)
 * SCAP (STIG benchmark)