Information Systems Security Officer – ISSO

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee, manage, and implement the entire RMF lifecycle from system categorization and the selection of security controls to their implementation, assessment, authorization, and ongoing monitoring.

• Acquire and uphold Authorities to Operate (ATOs).

• Coordinate RMF activities with U.S. Navy clients, government stakeholders, system owners, engineering teams, and program staff.

• Create, manage, maintain, and support RMF documentation packages, which include SSPs, SARs, POA&Ms, and assessment evidence.

• Handle RMF authorization documentation and security-control assessments within eMASS.

• Interpret and apply CCSRGs, NIST SP 800-53 controls, and federal cybersecurity regulations.

• Evaluate custom on-premises and AWS cloud environments, identify control gaps, and manage remediation efforts.

• Execute vulnerability management tasks, such as ACAS scanning, vulnerability analysis, STIG reviews, and VRAM tracking.

• Conduct continuous monitoring, monthly security reporting, vulnerability-scan analysis, security-control reviews, account and access evaluations, configuration-change assessments, and corrective-action tracking.

• Develop, coordinate, and implement security assessment and testing strategies.

• Identify, document, evaluate, and communicate cybersecurity risks and deficiencies.

• Collect and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and monitor security tasks until completion.

• Assist the customer with training and tabletop exercises related to contingency planning, incident response, and disaster recovery.

• Support a U.S. Navy government program across AWS, applications, APIs, and infrastructure.

⛳️ Requirements

• A minimum of 5 years of professional experience in cybersecurity.

• Proven experience as an ISSO or in a comparable cybersecurity position within a federal government environment.

• Bachelor’s Degree in Cybersecurity, IT, or a related field.

• Ability to obtain and maintain a Secret security clearance.

• U.S. Citizenship is required for security clearance eligibility.

• Must reside within the continental United States.

• Experience independently managing and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-premises and cloud solutions.

• Proficient in preparing and managing RMF authorization documentation packages, including SSPs, SARs, POA&Ms, and supporting assessment evidence.

• Solid working knowledge of NIST SP 800-53 security controls and applicable federal cybersecurity standards.

• Experience with ACAS scanning and vulnerability tracking via VRAM.

• Familiarity with reviewing, interpreting, and implementing STIGs.

• Professional experience using eMASS for RMF authorization documentation, security control assessments, compliance records, and supporting evidence.

• Experience interpreting and applying CCSRG requirements.

• Proven experience evaluating application, infrastructure, database, and API security.

• Knowledge of API-based security mechanisms and the OWASP framework.

• Strong understanding of AWS cloud environments, architecture, and security services.

• Experience with continuous monitoring, vulnerability analysis, security status reporting, and system security compliance.

• Proficient in using cybersecurity tools or scanners for web applications, databases, containers, or other system components.

• Experience in assessing security deficiencies, evaluating cybersecurity risks, documenting findings, developing remediation plans, and tracking corrective actions.

• Knowledge of requirements analysis, security architecture and design, and converting cybersecurity requirements into technical controls.

• Working knowledge of Agile and DevSecOps practices, as well as cybersecurity, network, systems, and software engineering principles.

• Familiarity with Atlassian tools such as Jira, Confluence, and/or Splunk.

• Cybersecurity-related certification is preferred.

• Standard business hours aligned with the Eastern Time Zone.

🏝️ Benefits

• Nationwide medical, dental, and vision insurance.

• 3 weeks of Paid Time Off.

• 11 Paid Federal Holidays.

• 401k matching.

• Life Insurance at no cost to employees.

• Short-Term Disability at no cost to employees.

• Long-Term Disability at no cost to employees.

• Supplemental insurance options.

• Flexible spending accounts.

• Dependent Care spending accounts.

• Wellness incentives.

• Reimbursement for professional development and certifications.

• Training assistance opportunities to support career growth and progression.

• Hybrid and Remote work options to enhance work-life balance.

• Flexible scheduling options.