Information Systems Security Officer (ISSO)
New
S
Second Front SystemsCybersecurity software
RemoteFull-TimeSenior
SalaryThe base salary for this position will fall between $150,000 and $170,000. This opportunity includes potential eligibility for equity awards and discretionary bonuses.
Apply NowOpens the employer's application page
Job Details
- Experience
- 3–5 years hands-on DoD cybersecurity, RMF authorization, or information assurance experience
- Required Skills
- AWSKubernetes
Requirements
- Have 3–5 years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with direct ISSO or equivalent compliance experience supporting DoD ATO packages.
- Demonstrate proficiency building and maintaining eMASS authorization packages.
- Have working knowledge of DISA PPSM registration, ports, protocols, services, CAL, and boundary/data-flow documentation.
- Have practical knowledge of NIST 800-53 (Rev 4/5), NIST 800-37 RMF, and DoD-specific implementation guidance.
- Be familiar with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, the DISA Cloud Computing SRG, and continuous monitoring standards.
- Understand AWS, containers, Kubernetes, CI/CD, and how cloud-native patterns map to technical security controls.
- Have strong written communication skills for assessor-ready documentation and control narratives.
- Have an active U.S. Secret security clearance.
- Have a DoD 8570/8140 IAM Level I or IAT Level II baseline certification, such as Security+ or CISSP, or be able to obtain one within 90 days.
Responsibilities
- Execute all phases of the NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments.
- Own eMASS authorization packages, including control implementation details, test results, artifacts, and continuous monitoring status.
- Manage DISA PPSM registrations and reconcile ports, protocols, and services data flows with CAL and boundary architecture.
- Author System Security Plans, control implementation narratives, POA&Ms, and supporting RMF artifacts.
- Drive continuous monitoring, including monthly POA&M updates, vulnerability and patch reporting, IAVM compliance, significant change reviews, and periodic assessments.
- Validate STIG compliance and analyze ACAS/Tenable Nessus vulnerability scan results, tracking remediation against NIST 800-53 and DoD requirements.
- Serve as technical point of contact for ISSMs, assessors, and Authorizing Officials during assessments, readiness reviews, and audits.
- Partner with Product and Engineering to map AWS, containers, Kubernetes, and CI/CD controls to DoD RMF and NIST 800-53 requirements and provide defensible evidence.
View Full Description & ApplyYou'll be redirected to the employer's site
