Information Systems Security Officer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Responsibilities:
- Lead, manage, and execute the complete RMF lifecycle for assigned information systems from categorization and control selection through implementation, assessment, authorization, and continuous monitoring
- Coordinate RMF activities with U.S. Navy customers, government stakeholders, system owners, engineering teams, and program personnel
- Develop, manage, maintain, and support RMF documentation packages, including SSPs, SARs, POA&Ms, and assessment evidence
- Maintain authorization documentation, control assessments, compliance information, and package records in eMASS
- Interpret and apply CCSRGs, NIST SP 800-53 controls, and federal cybersecurity requirements
- Conduct vulnerability management activities, including ACAS scanning, vulnerability analysis, STIG reviews, and VRAM remediation tracking
- Perform continuous monitoring, monthly security reporting, vulnerability scan analysis, control reviews, account and access reviews, configuration-change reviews, and corrective-action tracking
- Develop, coordinate, and execute security assessment and testing plans
- Identify, document, assess, and communicate cybersecurity risks and deficiencies
- Gather and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion
- Assist the customer with training and tabletop exercises for contingency planning, incident response, and disaster recovery
Requirements:
- 5+ years of professional experience in cybersecurity or a cybersecurity-related field
- Bachelor’s degree in Cybersecurity or an IT-related field
- Must be able to obtain and maintain a Secret security clearance
- United States citizenship required for eligibility to obtain the security clearance
- Experience serving as an ISSO or in a comparable cybersecurity role within a federal government environment
- Experience independently managing system security authorization, RMF compliance, and ongoing security operations
- Experience leading and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-premises and cloud solutions
- Experience preparing and maintaining RMF authorization documentation packages, including SSPs, SARs, POA&Ms, and assessment evidence
- Strong working knowledge of NIST SP 800-53 security controls and applicable federal cybersecurity requirements
- Experience with vulnerability management, ACAS scanning, and VRAM vulnerability tracking
- Experience reviewing, interpreting, and implementing STIGs
- Experience using eMASS to manage RMF authorization documentation, security control assessments, compliance records, and evidence
- Experience interpreting and applying CCSRG requirements
- Experience evaluating application, infrastructure, database, and API security
- Familiarity with API-based security mechanisms and the OWASP framework
- Strong understanding of AWS cloud environments, architecture, and security services
- Experience with continuous monitoring, vulnerability analysis, security status reporting, and ongoing compliance
- Experience using cybersecurity tools or scanners for web applications, databases, containers, or other system components
- Experience assessing security deficiencies and risks, documenting findings, developing remediation plans, and tracking corrective actions
- Strong communication and organizational skills
- Experience with requirements analysis, security architecture and design, and translating cybersecurity requirements into technical controls
- Experience gathering security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles
- Familiarity with Atlassian tools such as Jira, Confluence, and/or Splunk
- Cybersecurity-related certification preferred
Benefits:
- Equal opportunity employer valuing diversity at all levels
- Professional solution firm providing access to talent and business-success support
Similar Jobs
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.
Senior Strategic Security Advisor
Senior cybersecurity advisor guiding regulated organizations through CMMC, risk, and compliance. CIT delivers managed IT, cybersecurity, cloud, and custom technology solutions.
Senior Security Engineer – Identity & Endpoint
Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.
Offensive Cybersecurity Engineer – RL Environments for AI Evaluation
Offensive cybersecurity engineers building and hardening reinforcement-learning environments. Evaluating frontier AI models for Terac, a platform connecting vetted experts with AI researchers and labs.
Senior System & Information Security Administrator
Senior administrator owning global servers, networks, security, backups, and end-user support. Coordinating external IT providers for a Bulgaria-based company.
Cybersecurity & Information Assurance Specialist – Federal Health IT
Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.
Information Security System Specialist – ATO Lead
ATO Lead preparing VA records application authority-to-operate packages under the Risk Management Framework. Supporting security controls, continuous monitoring, remediation, and Zero Trust governance remotely.
Chartered or Principal Enterprise Advisor – Security Architecture
Security architecture advisor assuring cloud, hybrid and on-premises environments for Intelance, a UK cybersecurity and advisory firm. Delivering threat models, design reviews and client-ready assurance reports.
Senior Baseline Security Engineer, CIS, STIGs
Senior security engineer building and validating CIS/STIG baselines for phia’s federal cybersecurity clients. Mapping configurations to NIST, FISMA, and agency security controls.