> Markdown version of [/jobs/ext/90821-1834-information-systems-security-officer-isso-onsite-pa](https://www.wearedevelopers.com/jobs/ext/90821-1834-information-systems-security-officer-isso-onsite-pa). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # 1834 - Information Systems Security Officer (ISSO) - Onsite - Pa - **Company:** Rollout Systems, LLC - **Location:** Patuxent River, MD, United States - **Experience:** Expert - **Salary:** $110,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Adobe Analytics, Cyber Security, Information Security Management, Microsoft Visio, Subsystems, Software Vulnerability Management, Information Technology, Scap Compliance Checker, Vulnerability Analysis - **Published:** May 16, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8918231/1834-information-systems-security-officer-isso-onsite-pa ## About the Role * 5 years of experience in Information Systems Security. * Experience as an ISSO in the following areas: + Risk Management Framework (RMF) processes. + Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio). + IT Systems and Subsystems. + Project Management. + Written & Verbal Communications. + Teamwork & Collaboration. + Working on classified systems (i.e., SIPRNet) within secure environments. + Working on high-visibility or mission-critical aspects of a given program and performing all functional duties independently and as part of a team in NAVAIR environments. CERTIFICATION(s) (One of the following:) * CISM * CISSP (Associate) * GSLC SECURITY CLEARANCE * Active Top Secret Security Clearance, * BS or BA degree in Computer Science, Engineering or an Information Technology. Allowable Substitution: 12+ years of related experience or additional 4 years of related experience with an AA/AS degree ## Description * Serve as Information System Security Officer (ISSO) for a designated NAVAIR program. * Manage day-to-day cybersecurity activities, including the oversight of less senior staff and their assigned responsibilities. * Perform duties of the Risk Management Framework (RMF) ISSO role, including: + Develop platform RMF authorization packages. + Prepare/Update RMF documentation. + Prepare IATTs and Use Case MFRs as required to support development and testing. + Prepare for CyberSafe authorization in parallel with the system authorizations. + Establish Cybersecurity policies IAW security control implementations. + Implement a Cybersecurity Plan. + Perform asset and vulnerability management via VRAM reporting. + Perform vulnerability assessments and system authorization activities through collaboration with SMEs (System Administrators, Network Admins, Lab Managers, Program Managers, and ISSMs). + Perform system security assessments. + Evaluate and report software IAW DITPR/DADMS requirements. ## Related Videos - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [3x Performance: A Humbling Journey](https://www.wearedevelopers.com/videos/100165-3x-performance-a-humbling-journey) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)