Hybrid ISSO - RMF & Cybersecurity Posture Lead

Dynamic Solutions Technology LLC

Washington (District of Columbia)

Hybrid

USD 120,000 - 170,000

Full time

8 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Dynamic Solutions Technology LLC, a premier strategic services firm, seeks an Information Systems Security Officer (ISSO) to support a government client in Washington, DC. This exempt hybrid role requires a U.S.

citizen, with at least two days per week on-site and additional case-by-case support as needed. Responsibilities include RMF implementation, SSP/SAR/POA&Ms development, continuous monitoring, vulnerability management, and security documentation oversight.

Qualifications

Bachelor's degree in a technical field required.
Security+ or equivalent DoD 8140/8570 certification required; higher certs preferred.
Minimum 6 years in information systems security or related field.
Minimum 5 years RMF experience with security control implementation and ATO artifacts.
Experience developing SSPs, SARs, POA&Ms, risk assessments, and authorization packages.
Familiarity with NIST SP 800-53, RMF, FISMA; knowledge of federal standards.

Responsibilities

Support RMF implementation, maintenance, and artifacts for federal information systems.
Develop, review, update, and maintain SSPs, SARs, POA&Ms, and risk assessments.
Assist with system categorization, control implementation, assessments, and authorization activities.
Support ConMon, vulnerability management, configuration reviews, audits, and remediation.
Analyze security data to identify deficiencies and coordinate remediation with stakeholders.
Maintain POA&Ms, risks, vulnerabilities, findings, and security issues; coordinate fixes.
Coordinate with System Owners, cloud staff, and other cybersecurity stakeholders to obtain evidence.
Conduct quality-control reviews of RMF deliverables and documentation for compliance.
Participate in technical reviews, governance meetings, and incident-response coordination.
Maintain proficiency with cybersecurity tools including CSAM, Splunk, ServiceNow, Tenable/Nessus, Qualys, Defender, Intune, BigFix, Azure, M365, Entra ID, Okta, Panorama, Zscaler.