Cybersecurity ISSE II — RMF & OT/ICS Expert

OneZero Solutions; Alexandria (VA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off

Holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions seeks a Cybersecurity SME Level II to support a federal cybersecurity program office under an RMF framework. You will serve as ISSE, guide RMF, assess cybersecurity posture, and advise on regulatory changes.

Responsibilities include managing RMF packages in eMASS, conducting SRRs, reviewing vulnerability scans, and ensuring ongoing compliance across DoD, DHS, and USCG requirements. Hybrid schedule with on-site work in DC area.

Qualifications

• Bachelor's degree in Computer Science, Cyber Security, IT, Software Engineering, Information Systems, Computer Engineering, or related technical discipline.
• Minimum 6 years of progressive cybersecurity experience in a technical field related to this labor category.
• DoD 8140 certification required on first day of performance; must hold one of CISSP, CompTIA Security+, CSSLP, CCSP, or CompTIA Cloud+ in good standing.
• Active final SECRET clearance (Tier 3 / SF-86).
• Recognized expertise and leadership in cybersecurity with strong communication skills.
• Experience implementing RMF including categorization, control selection, implementation, assessment, and continuous monitoring.

Responsibilities

• Lead RMF lifecycle for assigned USCG information systems and OT/ hybrids; manage continuous monitoring and decommissioning.
• Develop, maintain, and manage RMF authorization packages in eMASS (SSPs, SCTMs, POA&Ms, SARs, Contingency Plans, Incident Response Plans, risk assessments, inventories, topology diagrams, data flows).
• Perform Security Readiness Reviews; review vulnerability results; track remediation via patching or POA&Ms; manage false positives and DISA tickets.
• Maintain continuous monitoring and ensure ongoing compliance with DoD, DHS, and USCG security requirements and DISA STIGs; support cATO and dashboard integration.
• Conduct Security Impact Assessments for proposed changes; participate in CONOPS, PMR/PDR/CDR milestones; contribute to DHS SELC reviews and technical exchanges.
• Integrate Zero Trust, RMF controls, and OT/ICS security requirements into system designs; perform security engineering analyses and risk assessments.
• Evaluate emerging threats, TTPs, OT/ICS vulnerabilities, and supply-chain risks; propose safeguards to reduce attack surface.
• Track and report on OPORDs, TASKORDs, FRAGOs, ALCOASTs, TCTOs from JFHQ-DoDIN, USCYBERCOM, CGCYBER; produce executive updates and risk memorandums.
• Provide weekly, monthly, quarterly cybersecurity readiness updates and respond to data calls.

Skills

Communication skills

Technical leadership

Cybersecurity expertise

Education

Bachelor's degree in Computer Science, Cyber Security, IT, Software Engineering, IS, Computer Engineering

Tools

eMASS

ACAS

Nessus

Security Center

Elastic SIEM

HBSS

Tanium

Splunk

ServiceNow

Burp Suite

Job description

OneZero Solutions seeks a Cybersecurity SME Level II to support a federal cybersecurity program office under an RMF framework. You will serve as ISSE, guide RMF, assess cybersecurity posture, and advise on regulatory changes.

Responsibilities include managing RMF packages in eMASS, conducting SRRs, reviewing vulnerability scans, and ensuring ongoing compliance across DoD, DHS, and USCG requirements. Hybrid schedule with on-site work in DC area.