DoD ISSO: RMF/A&A Specialist for SAP

Peraton; Chantilly (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Subsidized benefits for employees and

25 days PTO per year

Job summary

Peraton is seeking a Mid-Level Information Systems Security Officer (ISSO) in Chantilly, VA to support a DoD SAP program. You will lead RMF activities, prepare and review SSPs, SCTMs, POA&Ms, and risk assessments, ensuring security controls align with JSIG and DISA requirements.

The role requires TS/SCI clearance, DoD policy knowledge, and collaboration with ISSMs, assessors, and program leadership to maintain authorization and monitor system risk across the lifecycle.

Qualifications

• Active TS/SCI with the ability to maintain clearances.
• Bachelor's degree plus 5+ years of relevant experience, or advanced degrees with fewer years.
• Experience in RMF authorization packages (SSPs, SCTMs, POA&Ms, risk assessments).
• Knowledge of DoD cybersecurity policies (JSIG, DISA STIGs).
• Experience with RMF lifecycle activities: categorization, control selection, authorization, monitoring.

Responsibilities

• Support RMF lifecycle phases for DoD SAP environments.
• Interpret JSIG policy for security requirements and control implementations.
• Develop and maintain SSPs, SCTMs, POA&Ms, risk assessments, and contingency plans.
• Coordinate security control assessments and authorization activities with stakeholders.
• Review vulnerability scans and DISA STIG findings to assess risk and authorization impact.
• Advise on security control implementation, remediation, and authorization requirements.

Skills

Top Secret with SCI clearance

RMF/JSIG

Windows/Linux security

Security documentation

Technical writing

Cybersecurity policy

Education

Bachelor's degree

Master's degree

Associate degree

High school diploma

Tools

eMASS

Xacta

ACAS/Nessus

SCAP tools

Job description

Peraton is seeking a Mid-Level Information Systems Security Officer (ISSO) in Chantilly, VA to support a DoD SAP program. You will lead RMF activities, prepare and review SSPs, SCTMs, POA&Ms, and risk assessments, ensuring security controls align with JSIG and DISA requirements.

The role requires TS/SCI clearance, DoD policy knowledge, and collaboration with ISSMs, assessors, and program leadership to maintain authorization and monitor system risk across the lifecycle.