Information System Security Officer (ISSO)
Core
Manage security, compliance, and risk for cloud-based systems to maintain authorization to operate (ATO) and support continuous monitoring.
Role type
Information System Security Officer (ISSO)
Builds
Cloud-based systems compliant with security authorization packages and ATO requirements
Domain
US Federal Government / Cloud Security / Risk Management
Required skills
RMF/JSIG accreditation, continuous monitoring, vulnerability assessment, risk analysis, security control implementation, STIG/CIS compliance, incident handling, audit log review
Preferred skills
Zero Trust Architecture, container security (Docker, Kubernetes), endpoint security platforms, National Security systems, air-gapped environments
Technologies
AWS, Azure, Nessus, ACAS, Splunk, eMASS, Microsoft Defender, Trellix ePO
Responsibilities
Maintain operational security posture for ATO, manage RMF/JSIG documentation (SSP, SAP, SAR, POA&M), coordinate with DevOps/IT on security changes, handle security incidents and anomalies, review audit logs for threats
Seniority
Mid-level, hands-on IC