Information System Security Officer

starfish; Patuxent Highland (MD); On-site; USD 80,000 - 130,000; Full time

Benefits offered by this job

ESOP participation

401(k) match

Health benefits

Job summary

Torch Technologies is seeking an Information System Security Officer to support cyber security operations for the DoW in Lexington Park, MD. The role focuses on RMF, NIST 800-53 controls, eMASS artifact preparation, and continuous monitoring within a DoD environment.

The position requires US citizenship, a DoW Secret clearance, and hands-on experience with ATO packages, POA&M management, and vulnerability assessments. Onsite work in Lexington Park, MD with 10% travel is expected.

Qualifications

• U.S. citizenship required.
• Bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 2+ years of experience in an ISSO/ISSM or compliance-focused cybersecurity role within DoD or federal environments.
• Active DoW Secret security clearance required.
• Working knowledge of RMF and NIST 800-53 security controls.
• Hands-on experience preparing and submitting artifacts in eMASS.
• Demonstrated experience managing POA&M, including tracking, coordinating remediation, and documenting closure of findings.
• Familiarity with vulnerability and compliance scanning tools (ACAS/Nessus, SCAP) and interpreting results against control requirements.
• DoD 8570/8140-compliant certification at IAM/IAT Level II or higher (e.g., Security+, CAP, CySA+).

Responsibilities

• Collect, prepare, and submit artifacts supporting eMASS ATO packages (SSPs, SCTMs, evidence).
• Verify configurations against NIST 800-53 requirements; identify gaps.
• Manage POA&M for assigned systems; coordinate remediation and close items with evidence.
• Coordinate with ISSEs, system admins, and engineering teams to gather evidence.
• Support continuous monitoring, including control reviews and vulnerability analysis.
• Track authorization expiration dates and lead re-authorization efforts.
• Maintain audit-ready eMASS documentation for systems and audits.
• Review vulnerability results (ACAS/Nessus, SCAP) and map to controls/POA&M.
• Support incident reporting per DoD/program policies; communicate risk posture to management.

Skills

RMF

NIST 800-53

eMASS

POA&M

ACAS/Nessus

SCAP

IAM/IAT Level II+

Education

Bachelor's degree in IT/Cybersecurity or related field

Tools

ACAS

Nessus

SCAP

Job description

Torch Technologies

Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation's top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: "Lighting the Pathway of Freedom". And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking an Information System Security Officer to join a team supporting cyber security operations for our DoW customer in Lexington Park MD.

Responsibilities

• Collect, prepare, and submit artifacts supporting eMASS ATO packages, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and supporting evidence for control implementation.
• Verify system and network configurations against NIST 800-53 control requirements, identifying and documenting gaps or non-conformance.
• Manage the Plan of Action and Milestones (POA&M) for assigned systems, including tracking open findings, coordinating remediation with system owners and engineers, and closing items with appropriate evidence.
• Coordinate with ISSEs, system administrators, and engineering teams to gather technical evidence and validate control implementation.
• Support continuous monitoring activities, including periodic control reviews, vulnerability scan result analysis, and reassessment of control effectiveness.
• Track authorization expiration dates and lead re-authorization/renewal efforts to maintain continuous ATO status.
• Maintain accurate, audit-ready documentation in eMASS for assigned systems and support external audits or assessor requests.
• Review vulnerability and compliance scan results (e.g., ACAS/Nessus, SCAP) and correlate findings to relevant 800-53 controls and POA&M items.
• Support incident reporting and documentation requirements in accordance with applicable DoD and program policies.
• Communicate risk posture and compliance status to program management and Authorizing Officials (AOs) as required.

Required Qualifications

• U.S. citizenship required.
• Bachelor's degree in Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 2+ years of experience in an ISSO, ISSM, or compliance-focused cybersecurity role within DoD or federal environments.
• Active DoW Secret security clearance required.
• Working knowledge of the Risk Management Framework (RMF) and NIST 800-53 security controls.
• Hands-on experience preparing and submitting artifacts in eMASS.
• Demonstrated experience managing POA&M, including tracking, coordinating remediation, and documenting closure of findings.
• Familiarity with vulnerability and compliance scanning tools (e.g., ACAS/Nessus, SCAP) and interpreting results against control requirements.
• DoD 8570/8140-compliant certification at IAM/IAT Level II or higher (e.g., Security+, CAP, CySA+).

Preferred Qualifications

• CAP, CASP, CISSP, or CISM certification.
• Experience supporting both classified and unclassified system authorizations.
• Experience with continuous monitoring/ConMon programs and periodic reassessment cycles.
• Familiarity with STIG-based hardening and correlating hardening evidence to control families.
• Experience supporting multiple concurrent ATO packages across varying system types.

Schedule: Regular fulltime

Work Location: Onsite, Lexington Park MD

Travel: yes, 10%

Relocation Assistance Available: Yes

Position Contingent Upon Award of Contract: No

Salary Range - MD: $80,000- $130,000

The salary range information is a general guideline only. Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate's qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications.

Benefits

• Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.

#LI-DK1