Senior Information Systems Security Officer (ISSO)

We are seeking a Senior Information Systems Security Officer (ISSO) to support our DoD customer. The Senior ISSO will serve as a senior cybersecurity Subject Matter Expert (SME), providing technical expertise and guidance for the security, authorization, vulnerability management, and continuous monitoring activities required to operate and sustain our customer’s capabilities.

The successful candidate will work closely with Government cybersecurity, engineering, architecture, and program teams to identify and mitigate cybersecurity risks, address complex security challenges, and ensure customer systems and capabilities comply with applicable DoD and DISA cybersecurity requirements.

This is a remote position; however, occasional local travel to customer facilities throughout the Washington, DC Metro area may be required based on mission and customer needs.

Responsibilities Include:

• Serve as a senior cybersecurity SME supporting systems and capabilities.
• Support implementation and execution of the Risk Management Framework (RMF).
• Support Assessment and Authorization (A&A) activities and maintenance of system authorization packages.
• Monitor cybersecurity posture, vulnerabilities, findings, and remediation activities.
• Analyze cybersecurity risks and vulnerabilities and develop recommendations and courses of action for mitigation.
• Develop, review, and maintain RMF artifacts, cybersecurity documentation, and supporting evidence.
• Support vulnerability management, incident management, change management, audit and compliance, and access-control activities.
• Monitor and support completion and maintenance of eMASS packages and associated cybersecurity artifacts.
• Review and analyze STIG/SRR findings and support remediation and compliance activities.
• Utilize cybersecurity tools including ESS, ACAS, COAMS, CMRS, STIG Viewer, and eMASS to assess and maintain system cybersecurity posture.
• Coordinate with system owners, cybersecurity personnel, engineers, architects, and Government stakeholders to resolve complex cybersecurity issues.
• Provide senior-level cybersecurity guidance, technical analysis, alternatives, and recommendations to leadership and technical teams.
• Independently analyze complex cybersecurity challenges and develop practical solutions supporting mission requirements.

Required Skills, Experience, and Qualifications:

• MA/MS with at least 15 years of relevant experience. Additional equivalent experience may substitute for a master’s degree.
• One of the following current certifications: Security X/CASP+, CCISO, CCSP, CCGRC/CAP, Cloud+
• Must have and maintain a current DoD Top Secret clearance.
• Candidates must reside within a commutable distance of our customer's facilities in the Washington, DC metro area in order to work onsite when required. 
• Extensive experience supporting cybersecurity, Information Assurance, Information Systems Security, or Security Engineering activities.
• Senior-level experience supporting cybersecurity within DoD environments.
• Demonstrated experience analyzing and resolving complex cybersecurity and information systems security issues.
• Extensive experience implementing and supporting DoD RMF processes and controls.
• Experience developing, reviewing, and maintaining eMASS/RMF authorization packages and supporting artifacts.
• Hands-on experience with cybersecurity tools including ESS, ACAS, COAMS, CMRS, STIG Viewer, and STIG/SRRs.
• Experience assessing system vulnerabilities, security findings, risks, and remediation activities.
• Experience supporting A&A, continuous monitoring, vulnerability management, incident management, and cybersecurity compliance.
• Ability to independently analyze technical issues and develop recommended courses of action.
• Strong written and oral communication skills, including the ability to communicate complex cybersecurity issues to technical teams and senior leadership.
• Experience with Microsoft Office products, including Word, Excel, and SharePoint.
• Working knowledge of Microsoft Windows, Microsoft Server, VMware, or comparable enterprise infrastructure technologies.
• Ability to effectively collaborate in a remote environment with Government and contractor cybersecurity, engineering, architecture, and program teams.

Preferred Qualifications:

• Previous DISA cybersecurity experience.
• Experience supporting Mission Partner Environment (MPE) or similar mission-partner environments.
• Previous experience serving as an ISSO, senior cybersecurity advisor, or security engineering SME.
• Experience serving as a Trusted Agent.
• Practical knowledge of Public Key Infrastructure (PKI), certificates, and public/private key management.
• Experience working across cybersecurity, network, cloud, identity, architecture, and systems engineering teams.
• CISSP or comparable senior-level cybersecurity certification.

The projected salary range for this position is $160,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.