Information Security Systems Officer - DOL

TechSur Solutions, LLC; Washington, Northern (District of Columbia, KY); Hybrid; USD 160,000 - 165,000; Full time

Job summary

TechSurSolutions, based in the DC metropolitan area, seeks an Information System Security Officer to support DOL OCIO/ETA SWARAS security compliance, authorization, continuous monitoring, vulnerability management, POA&M remediation, risk register maintenance, and security documentation.

This role leads security compliance for a FISMA Moderate application ecosystem and coordinates with DOL OCIO cybersecurity stakeholders, application teams, and program leadership.

Qualifications

• 5+ years of federal cybersecurity, ISSO, RMF, ATO, or security compliance experience.
• Hands-on with FISMA Moderate, NIST 800-53, RMF, POA&M management, and vulnerability management.
• Experience supporting Department of Labor IT programs is REQUIRED.
• Experience coordinating remediation across application, database, infrastructure, and DevSecOps teams.
• Strong understanding of federal security documentation, findings, remediation planning, and continuous monitoring.
• U.S. Citizenship and ability to obtain and maintain DOL Public Trust suitability.

Responsibilities

• Lead SWARAS FISMA Moderate compliance support, including NIST 800-53 controls, NIST 800-171 alignment, FIPS, HSPD-12/PIV, TIC, and DOL security policy compliance.
• Maintain CSAM artifacts, system security documentation, security/privacy plans, risk registers, POA&M, audit responses, and ATO support documentation.
• Analyze vulnerability scan results, audit findings, penetration testing results, and security control assessments, then coordinate remediation with DevSecOps, DBA, and system owner stakeholders.
• Track POA&M milestones, remediation timelines, evidence packages, and closure documentation within Government-defined timelines.
• Support secure SDLC controls, code review evidence, static/dynamic testing evidence, third-party/open-source component tracking, and security release gates.
• Support incident response requirements, including rapid escalation for PII-related incidents and coordination with DOL OCIO security stakeholders.
• Provide security input for CPIC reporting, portfolio data calls, continuous monitoring, and governance reviews.

Skills

Federal cybersecurity

ISSO RMF

FISMA Moderate

Vulnerability management

Security documentation

POA&M management

Education

Security+

CISSP

Tools

Splunk

ServiceNow

Jira

Confluence

SolarWinds

SAST/DAST

Job description

Information Security Systems Officer - DOL

• Full-time
• Active Government Security Clearance: No
• Compensation: USD 160000 - USD 165000 - yearly

TechSurSolutions is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.Based in the DC metropolitan area,TechSurspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.Since we were formed inAugust of2016,we have supported multiple impactful and excitinggovernment programs.

TechSur is seeking an Information System Security Officer to support DOL OCIO/ETA SWARAS security compliance, authorization, continuous monitoring, vulnerability management, POA&M remediation, risk register maintenance, and security documentation. This role serves as the security compliance lead for a FISMA Moderate application ecosystem and coordinates with DOL OCIO cybersecurity stakeholders, application teams, database teams, and program leadership.

Key Responsibilities

• Lead SWARAS FISMA Moderate compliance support, including NIST 800-53 controls, NIST 800-171 alignment, FIPS, HSPD-12/PIV, TIC, and DOL security policy compliance.
• Maintain CSAM artifacts, system security documentation, security/privacy plans, risk registers, POA&Ms, audit responses, and ATO support documentation.
• Analyze vulnerability scan results, audit findings, penetration testing results, and security control assessments, then coordinate remediation with DevSecOps, DBA, and system owner stakeholders.
• Track POA&M milestones, remediation timelines, evidence packages, and closure documentation within Government-defined timelines.
• Support secure SDLC controls, code review evidence, static/dynamic testing evidence, third-party/open-source component tracking, and security release gates.
• Support incident response requirements, including rapid escalation for PII-related incidents and coordination with DOL OCIO security stakeholders.
• Provide security input for CPIC reporting, portfolio data calls, continuous monitoring, and governance reviews.

Required Qualifications

• 5+ years of federal cybersecurity, ISSO, RMF, ATO, or security compliance experience.
• Hands-on experience with FISMA Moderate, NIST 800-53, RMF, POA&M management, vulnerability management, security documentation, and ATO support.
• Experience Supporting Department of Labor IT programs is REQUIRED.
• Experience coordinating remediation across application, database, infrastructure, and DevSecOps teams.
• Strong understanding of federal security documentation, security control assessment findings, remediation planning, and continuous monitoring.
• U.S. Citizenship and ability to obtain and maintain DOL Public Trust suitability.
• Prior DOL OCIO, ETA, CSAM, ATO, or federal civilian ISSO experience.
• Security+, CISSP, CISM, CAP, CGRC, CEH, or equivalent security certification.
• Experience with Splunk, ServiceNow, Jira, Confluence, SolarWinds, SAST/DAST, and vulnerability scanning tools.

All your information will be kept confidential according to EEO guidelines.