Information System Security Officer (ISSO)
Core
Lead a team to develop, manage, and maintain Information System Security Assessment and Authorization (A&A) packages, supporting the Risk Management Framework (RMF) process and Authorization to Operate (ATO) for government customers.
Role type
Senior Information System Security Officer (ISSO)
Builds
ATO documentation, security control narratives, and continuous monitoring reports for DoD information systems
Domain
US Department of Defense / Cybersecurity Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Team leadership, RMF process execution, NIST SP 800-53 Rev5, CNSSI 1253, eMASS/Xacta system management, Cloud platform familiarity (AWS/Azure/GCP), Air Force risk management policies, Executive communication
Preferred skills
Air Force A&A process knowledge, SIEM tools (Splunk/Elastic), DoD DevSecOps Fundamentals, Fast Track ATO methodologies
Technologies
eMASS, Xacta, AWS, Azure, Google GCP, Splunk, Elastic
Responsibilities
Create and maintain A&A packages including SSPs, SCTMs, and POA&Ms; Manage continuous monitoring activities including vulnerability scans and penetration test reports; Brief ISSMs/SCAs/AOs on cyber posture; Translate security controls into NIST control narratives; Lead a team of cyber individuals
Seniority
Senior, hands-on IC with team leadership