Information System Security Officer (ISSO)

ECS; Fairfax (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS seeks an experienced Information System Security Officer (ISSO) in a hybrid role at our Fairfax, VA office. You will support RMF activities for the AWS IL5 environment and coordinate with the government cybersecurity team to prepare IATT and ATO packages.

The ideal candidate brings DoW experience, RMF expertise, and hands-on practice with ACAS/Nessus, eMASS, and STIGs. You will work with engineers to validate findings and maintain authorization documentation for cloud and

Qualifications

• Active DoD 8140 IAT Level II Security+ (or higher).
• Minimum 5 years of relevant cybersecurity experience, including DoW RMF, security authorization, or continuous monitoring.
• Hands-on experience with RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring.
• Experience with AWS DoD environments and cloud security concepts.
• Ability to develop and maintain cybersecurity documentation (SSPs, POA&Ms, policies, SOPs).
• Strong analytical, writing, and communication skills for stakeholders.

Responsibilities

• Support RMF activities for the AWS IL5 environment through SDLC, IATT, ATO, and continuous monitoring.
• Develop and maintain authorization artifacts, security plans, evidence, diagrams, and SOPs.
• Maintain eMASS records, including control details, artifacts, assessments, and POA&Ms.
• Develop, track, and close POA&Ms for vulnerabilities, STIG findings, and control deficiencies.
• Review DISA STIG artifacts and supporting evidence, including scans and remediation.
• Perform vulnerability analysis using ACAS/Nessus and validate scan results.
• Evaluate DTOs, CVEs, and directives to assess exposure and adjust ACAS scans.
• Collaborate with engineers to validate findings and track remediation.

Skills

U.S. Citizen

Secret clearance

IAT Level II Security+

RMF

NIST 800-53

ACAS/Nessus

eMASS

DISA STIGs

DTOs/ CVEs analysis

AWS DoD cloud

Kubernetes

Linux/Windows

Identity/Access management

Tools

ACAS/Nessus

eMASS

DISA STIGs

NIST SP 800-53

Job description

Job Description

Everforth ECS is seeking an experienced Information System Security Officer (ISSO) to work in a hybrid capacity at our Fairfax, VA office.

The ISSO will support the development, authorization, and ongoing cybersecurity compliance of Jupiter, a newly established DISA IL5 AWS environment supporting CUI. The environment will house multiple U.S. Coalition Mission Partner Environments (MPE).

This position is a demanding, high energy role that requires strong cybersecurity judgement, attention to detail, and the ability to help build an RMF authorization package from the ground up across multiple enclaves in a dynamic AWS DoW environment. The ISSO will work closely with the ISSM, cloud and systems engineers, and government cybersecurity team to prepare the environment for an Interim Authorization to Test (IATT) and ultimately an Authorization to Operate (ATO).

The ideal candidate has hands-on ISSO experience supporting DoW programs, a strong working knowledge of RMF and NIST 800-53 controls, DISA STIGs, eMASS, ACAS/Nessus, POA&M management, and security authorization documentation. The candidate should be technically capable of independently investigating DTO’s, control artifacts, reviewing system configurations and scan results, and working directly with engineers to validate and remediate cybersecurity findings. Experience supporting AWS DoW environments strongly preferred. The ISSO reports to the Senior Information System Security Manager.

Job Responsibilities

• Support RMF activities for the AWS IL5 environment throughout system development, IATT, ATO, and continuous monitoring, including security assessments, audit readiness, and authorization package updates.
• Develop and maintain authorization artifacts, including security plans, control implementation evidence, vulnerability documentation, diagrams, inventories, risk documentation, policies, procedures, and SOPs.
• Maintain eMASS records, including control implementation details, artifacts, assessment results, POA&Ms, risk documentation, and continuous monitoring evidence.
• Develop, maintain, and track POA&Ms for vulnerabilities, STIG findings, control deficiencies, assessment findings, and other identified cybersecurity risks.
• Review and validate DISA STIG artifacts and supporting evidence, including checklists, scan results, remediation evidence, mitigations, and closure documentation.
• Perform hands-on vulnerability analysis using ACAS/Nessus, including reviewing scan results, affected assets, credentialed scan status, plugin output, remediation guidance, and scan coverage.
• Evaluate DTOs, CVEs, cybersecurity directives, and vulnerability notifications to determine potential impact to Jupiter; configure, modify, or troubleshoot ACAS scans as necessary to validate system exposure.
• Work with engineering teams to validate vulnerabilities and security findings, track remediation, conduct rescans and maintain supporting vulnerability and closure documentation.
• Review the cybersecurity impact of new AWS services, applications, Kubernetes workloads, software packages, architecture changes, and system changes and ensure associated authorization documentation remains current.
• Support and validate endpoint security, logging, monitoring, identity and access management, configuration management, and other technical security controls implemented within the environment.
• Coordinate cybersecurity and authorization activities with engineering, program leadership, and government stakeholders.
• Other duties, as assigned.

Salary Range: $140,000-160,000

Required Skills

• U.S. Citizen.
• Ability to obtain Secret clearance (active preferred)
• Active DoD 8140 IAT Level II Security+ (or higher).
• Ability to work up to 3 days a week in a hybrid capacity out of Fairfax, VA. Additional onsite support may be required based on operational or mission needs.
• Minimum 5 years of relevant cybersecurity experience, including experience supporting DoW information systems, RMF, security authorization, or continuous monitoring activities.
• Hands-on experience with DoD RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring activities.
• Working knowledge of AWS security and compliance concepts, including cloud shared responsibility, inherited controls, identity and access management, logging, network security, and security control implementation within cloud environments.
• Practical understanding of secured IT infrastructure, including AWS, Kubernetes, Linux, Windows, Entra ID/Active Directory, networking, authentication, endpoint security, logging, and monitoring, with the ability to evaluate how these technologies affect the system's security and authorization posture.
• Ability to develop and maintain cybersecurity documentation including System Security Plans, control implementation statements, POA&Ms, risk documentation, policies, procedures, SOPs, and continuous monitoring artifacts.
• Hands-on experience with ACAS/Nessus, including credentialed scanning, vulnerability analysis, scan configuration, troubleshooting scan coverage or authentication issues, and targeted vulnerability assessments.
• Ability to analyze DTOs, CVEs, cybersecurity directives, and vulnerability notifications and independently determine potential system exposure using ACAS/Nessus and other available technical information.
• Experience reviewing and validating DISA STIGs, security configuration evidence, remediation documentation, mitigations, and vulnerability closure evidence.
• Ability to work directly with cloud, system, network, and application engineers to validate technical security controls, investigate findings, determine remediation approaches, and collect sufficient evidence to support RMF requirements.
• Ability to translate technical vulnerabilities and control deficiencies into clear mission and cybersecurity risk statements for ISSMs, system owners, government stakeholders, and Authorizing Officials.
• Strong analytical, problem solving, technical writing, and verbal communication skills, with the ability to independently investigate cybersecurity issues and communicate effectively with both technical and non-technical stakeholders.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Desired Skills

• Active Secret clearance.
• Experience supporting a system through an initial IATT and/or ATO, including development of authorization artifacts from the ground up.
• Familiarity with Kubernetes security and compliance, including containerized workloads, cluster security, logging, and vulnerability management.
• Experience with security and monitoring technologies such as Trellix, Elastic, Grafana, Loki, AWS-native security services, or similar tools.
• Prior experience supporting DISA programs and working directly with government cybersecurity stakeholders, assessors, or Authorizing Officials.
• Strong technical writing skills, including development of control implementation statements, risk and mitigation narratives, POA&M closure justifications, policies, procedures, and ATO documentation.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!