Information System Security Officer (ISSO)

Dark Wolf; Chantilly (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Dark Wolf is seeking an Information System Security Officer (ISSO) to lead a vibrant team in developing, managing, and maintaining information system security packages. The role encompasses full RMF processes with hybrid opportunities based out of Chantilly, Virginia.

The successful candidate will have a strong background in cybersecurity, guiding lifecycle activities and ensuring compliance with security standards while overseeing assessments and providing leadership within the team.

Qualifications

• 5+ years of relevant cyber experience.
• Ability to assess technical environments and develop ATO documentation.
• Hands-on experience with eMASS or Xacta.

Responsibilities

• Lead the development of A&A packages including SSPs and SCTMs.
• Drive lifecycle activities while ensuring cybersecurity.
• Manage continuous monitoring activities and audits.

Skills

Team leadership in cybersecurity

Experience with AWS/Azure/GCP

Stability in NIST SP 800-53

Experience with RMF processes

Communication skills

Education

B.A. or B.S. in Information Security or Computer Science

3 years of industry experience as equivalent

Tools

eMASS

Xacta

SIEM tools (e.g., Splunk, Elastic)

Job description

Dark Wolf

is seeking an Information System Security Officer (ISSO) to lead a collaborative team to develop, manage, and maintain information system security Assessment and Authorization (A&A) packages. This role will support the planning, execution, and monitoring of the full RMF process for our customers. The position will be based out of Chantilly, VA with hybrid flexible opportunities.

Responsibilities

• Creating, managing, and maintaining A&A packages to include System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Plans of Action and Milestones (POA&Ms), and other artifacts.
• Supporting the entry and maintenance of data into information system security systems of record, such as eMASS or Xacta.
• Driving cybersecurity activities through all aspects of the system’s life cycle from planning, development, and deployment while ensuring proper hardening and security analysis is enforced to protect the Confidentiality-Integrity-Availability (C-I-A) of the environment.
• Familiar with briefing ISSMs/SCAs/AOs to provide updates on the cyber posture of the information system.
• Manage and implement continuous monitoring activities, consisting of periodic reviews of controls, audits, vulnerability scans, and penetration test reports.
• Develop and maintain POA&Ms to compile and track system vulnerabilities, mitigation efforts, remediation and closures; providing fix actions and compensating controls.
• Review POA&M data and brief stakeholders as necessary.

Required Qualifications

• Experience leading a team of cybersecurity professionals.
• 5+ years of relevant cyber experience.
• Experience assessing technical environments and translating implemented security controls into clear NIST SP 800-53 control narratives and supporting Authorization to Operate (ATO) documentation.
• Cloud platform familiarity with at least one service offering from AWS, Azure, or Google GCP.
• Experience as an RMF Engineer, ISSO, and/or information assurance engineer.
• Hands‑on eMASS or Xacta experience completing full system lifecycle activities.
• Experience with NIST 800-53 Rev5 and CNSSI 1253.
• Experience with Air Force risk management policies/procedures, including DODI 8510.01, AFI 17‑101, Fast Track ATO Handbook & AF Continuous ATO Playbook.
• Ability to clearly articulate ideas for executive level consumption.
• Ability to use prior experience and knowledge to address new situations, especially when interacting with clients.
• B.A. or B.S. in Information Security, Computer Science or related discipline; or equivalently 3 years of industry experience.
• US citizenship and TS/SCI security clearance.

Desired Qualifications

• Knowledgeable with the Air Force A&A process and requirements.
• Knowledge of SIEM tools such as Splunk or Elastic.
• Knowledgeable with DoD DevSecOps Fundamentals Playbook.
• Experience with DoD Fast Track ATO Handbook & Air Force Continuous ATO Playbook methodologies.

Compensation

The salary range for this position is estimated to be between $140,000.00 - $160,000.00, commensurate with experience and technical skill set.

EEO Statement

We are proud to be an EEO/AA employer. Minorities/Women/Veterans/Disabled and other protected categories are welcome.

Employment Details

All positions are direct, full‑time, W2 employees. The company does not engage with third‑party staffing agencies, C2C, or 1099 independent contractors for this role. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.