Secret Information Systems Security Officer

Job Summary

To support mission-critical cloud and SaaS platforms within DoD environments, the full-time remote Information Systems Security Officer (ISSO) will execute the Risk Management Framework (RMF), manage continuous monitoring activities, and ensure compliance across cloud-native environments.

Key responsibilities:

• Execute and maintain RMF activities across the full authorization lifecycle, including assessment, authorization, and continuous monitoring
• Build, manage, and maintain authorization packages within eMASS
• Drive continuous monitoring activities including vulnerability management, patch compliance, and control assessments

Required qualifications:

• 3-5 years of experience supporting DoD cybersecurity, RMF, ATO, or information assurance programs
• Hands-on experience building and maintaining authorization packages in eMASS
• Experience with DISA PPSM, NIST 800-37, NIST 800-53, and DoD cybersecurity requirements
• Understanding of cloud-native architectures including AWS, Kubernetes, and CI/CD pipelines
• DoD 8570/8140 IAM Level I or IAT Level II certification required (Security+, CISSP, or equivalent)