Information Systems Security Officer

Job Summary

Leading Risk Management Framework (RMF) activities, the full-time remote Information Systems Security Officer (ISSO) will manage authorization efforts and continuous monitoring initiatives for accredited cloud environments while supporting U.S. national security objectives.

Key responsibilities

• Execute and maintain all phases of the DoD RMF lifecycle, including categorization, implementation, assessment, authorization, and continuous monitoring activities
• Build, manage, and maintain authorization packages within eMASS, ensuring documentation remains current and audit-ready
• Partner with engineering teams to remediate vulnerabilities, validate STIG compliance, and map cloud-native technologies to NIST 800-53 security controls

Required qualifications

• 3-5 years of experience supporting DoD cybersecurity, RMF authorizations, or ATO package management
• Hands-on experience with eMASS, DISA PPSM, NIST 800-53, and DoD cybersecurity policies
• Experience supporting cloud environments, containers, Kubernetes, and continuous monitoring programs
• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)
• Active Secret Security Clearance and DoD 8570/8140 IAM Level I or IAT Level II certification required