> Markdown version of [/jobs/ext/734660-isso-cloud](https://www.wearedevelopers.com/jobs/ext/734660-isso-cloud). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # ISSO - Cloud - **Company:** Amentum Services, Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $145,000.0 - $155,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Excel, Amazon Web Services, Systems Engineering, Confluence, JIRA, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Data Security, Linux, Information Security Management, Intrusion Detection Systems, Windows Servers, Security Information and Event Management, Software Vulnerability Management, Information Security Management System, Firewalls (Computer Science), SC Clearance, Information Technology, Nessus, Splunk, Vulnerability Analysis - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=d8d9b1fda32cf214 ## About the Role Do you have a valid AWS Certified Cloud Practitioner - Foundational certification?, Do you have experience in Vulnerability scanning implementation?, * Active Top-Secret clearance with SCI eligibility * Bachelor's degree in Information Systems Engineering, Computer Science, Engineering, Business or other related field; experience considered in lieu of degree * AWS Cloud Practitioner Certification (or similar) * Minimum of 8 years of experience; 7+ years of experience working as an Information Systems Security Officer * In-depth knowledge of information security principles, methodologies, and best practices * Extensive cloud administration experience; cloud ATO's (Authority to Operate) * Familiarity with industry standards and regulations (e.g., ISO 27001, NIST, HIPAA, etc.) * Experience in conducting risk assessments and implementing security controls * Experience with Risk Management Framework (RMF), ICD 503, NIST SP800-53 or DCID 6/3 * Proficiency in using security tools and technologies, such as firewalls, intrusion detection systems, SIEM, and vulnerability management tools * Strong analytical and problem-solving skills to identify security gaps and develop effective mitigation strategies * Knowledge of incident response procedures * Familiarity with the ATO process Preferred Qualifications: * Splunk, JIRA, Confluence, Nessus * Strong Excel experience * Experience with Amazon Web Services and/or Microsoft Azure Cloud * Experience implementing, reviewing, and providing recommendations on Cloud Security configurations * Experience with Microsoft Windows Server and Linux * AWS Associate Level or above Certification(s) ## Description You will be responsible for technical information assurance engineering efforts with network/server scanning, patching, mitigation, and compliance cross-checking of target network assets. Experience in ST&E process and POAM generation. You will need a strong understanding of approved COTS security analyst tools and government mitigation/compliance checkers. You will need a strong comprehension of FISMA, DIACAP, NIST-800 SPs and DCID 6/3 standards and policy control grouping., * Serve as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO) / Information System Security Manager (ISSM) on all matters, technical and otherwise, involving the security of an information system * Responsible for ensuring the implementation and maintenance of security controls * Direct and implement the necessary controls and procedures to cost-effectively protect information systems assets from intentional or inadvertent modification, disclosure, or destruction * Provide guidance and direction for the physical protection of information systems assets to other functional units * Provide reports to superiors regarding effectiveness of data security and makes recommendations for the adoption of new procedures * Assist with reviewing, developing, and navigating the system, team, and customer through the Authority to Operate (ATO) accreditation/certification documentation process * Perform network self-inspections * Create new and edit existing documentation that forms the Authority to Operate (ATO) package to include the System Security Plan and IS contingency plan * Develop Plan of Action and Milestone (POAMS) from vulnerability data and enter into the system of record * Possesses and applies a comprehensive knowledge across key tasks and high impact assignments * Plan and lead major technology assignments * Evaluate performance results and recommend major changes affecting short-term project growth and success * Function as a technical expert across multiple project assignments ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)