Federal ISSO: Security & RMF Compliance Lead

Tetra Tech; Washington (District of Columbia); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision, life, STD, LT

11 federal holidays and PTO

Performance-based incentives

401(k) with company matching

Flexible Spending Accounts

Tuition Assistance

Charitable Contribution matching

Equal opportunity employer

Job summary

Halvik Corp seeks an Information Assurance professional to implement and maintain security measures for a Federal customer. You will perform IA engineering, ensure compliance with Federal requirements, and conduct assessments and monitoring activities to manage risk.

Responsibilities include regular security assessments, incident response planning, and documentation under NIST RMF, with an active Secret clearance, and collaboration with system owners and cybersecurity leadership to address

Qualifications

• Bachelor's degree in Information Technology or Business or equivalent.
• One+ year IT experience; ISSO experience preferred.
• Active Secret clearance required.

Responsibilities

• Perform regular security assessments of networks, systems, apps, and cloud environments.
• Develop or support incident response plans and conduct security training.
• Monitor compliance with security standards, regulations, and NTIA policies.
• Support continuous monitoring: vulnerability scans, log analysis, remediation tracking.
• Prepare SAPs, SARs, POA&Ms per NIST RMF.
• Validate remediation effectiveness through retesting and evidence review.

Skills

Active Secret clearance

CISSP or equivalent

Strong communication

Education

Bachelor's degree in Information Technology or Business

Associates + 1 year experience + professional certification

Job description

Halvik Corp seeks an Information Assurance professional to implement and maintain security measures for a Federal customer. You will perform IA engineering, ensure compliance with Federal requirements, and conduct assessments and monitoring activities to manage risk.

Responsibilities include regular security assessments, incident response planning, and documentation under NIST RMF, with an active Secret clearance, and collaboration with system owners and cybersecurity leadership to address