Information Systems Security Officer

Job Summary

To support secure cloud-native software solutions, the fully remote Information Systems Security Officer (ISSO) will lead Risk Management Framework (RMF) activities, manage authorization efforts, and oversee continuous monitoring initiatives for accredited cloud environments.

Key responsibilities

• Execute and maintain all phases of the DoD RMF lifecycle, including categorization, implementation, assessment, authorization, and continuous monitoring activities
• Build, manage, and maintain authorization packages within eMASS, ensuring documentation remains current and audit-ready
• Partner with engineering teams to remediate vulnerabilities, validate STIG compliance, and support assessments while mapping cloud-native technologies to NIST 800-53 security controls

Required qualifications

• 3-5 years of experience supporting DoD cybersecurity, RMF authorizations, information assurance, or ATO package management
• Hands-on experience with eMASS, DISA PPSM, NIST 800-53, NIST 800-37, ACAS/Nessus, STIGs, and DoD cybersecurity policies
• Experience supporting cloud environments, containers, Kubernetes, CI/CD pipelines, and continuous monitoring programs
• Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, Computer Science, or a related field (or equivalent experience)
• Active Secret Security Clearance required with eligibility to obtain a higher clearance