Information System Security Officer (ISSO)
Core
Ensure compliance, monitor cybersecurity posture, and support RMF/JSIG accreditation for US Department of Defense cloud systems.
Role type
Senior IC Information System Security Officer (ISSO)
Builds
Secure DoD cloud systems and programs
Domain
Defense / Cybersecurity / Cloud Infrastructure
Required skills
RMF/JSIG accreditation lifecycle, continuous monitoring, vulnerability assessment, risk analysis, STIG/CIS compliance, cloud-native security (encryption, IAM, segmentation), incident handling, technical writing
Preferred skills
Zero Trust Architecture (ZTA), container security (Docker/Kubernetes), endpoint security (Microsoft Defender/Trellix), TCP/IP networking, security audit experience
Technologies
Splunk, Nessus, ACAS, SCAP Compliance Checker, Evaluate-STIG, DISA STIGs, eMASS, Microsoft Defender, Trellix (ePO), Azure, AWS, Docker, Kubernetes, ECS, EKS, AKS
Responsibilities
Perform continuous monitoring, vulnerability assessment, and risk analysis; Maintain operational security posture consistent with authorization packages; Verify user clearance and need-to-know; Ensure audit records are captured and reviewed; Conduct regular system security reviews; Develop and maintain RMF documentation packages (SSP, SAP, SAR, POA&M, ConMon); Support development and sustainment of ATO packages and Body of Evidence; Coordinate hardware/software/firmware changes; Collaborate with Security Engineers and DevOps teams; Implement cloud-native security solutions; Participate in incident handling and reporting.
Seniority
Senior, hands-on IC
