Information System Security Officer, (ISSO)

SCALIS; Fort Meade (FL); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health Insurance

Vision Insurance

401(k) Matching

Paid Time Off (PTO)

Paid Holidays

Life Insurance

Birthday PTO

Education Reimbursement

Job summary

Cinteot Inc. is seeking an Information System Security Officer (ISSO) to support DISA IE under the CTAS Task Order.

This Level 3 role bridges vulnerability management, STIG application, and accreditation documentation to ensure Authorization to Operate (ATO) and maintains compliance across systems. The ISSO will mentor junior ISSOs, interface with Government stakeholders, ISSMs, and AOs, and help deliver key artifacts such as SSPs, SARs, and POA&Ms while ensuring timely submissions to eMASS and

Qualifications

• Bachelor's degree in cybersecurity or related field required.
• Active DoD 8140.03/8570.01-M baseline certification required (e.g., Security+, CISSP, CISM).
• 7+ years of DoD cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation experience.
• Experience applying DISA STIGs/SRGs and preparing accreditation artifacts.

Responsibilities

• Lead RMF/AA artifacts: SSPs, SARs, POA&Ms, testing docs.
• Apply DISA STIGs/SRGs to maintain baselines.
• Analyze ACAS/HBSS/CMRS findings and drive remediation.
• Prepare eMASS accreditation packages for submissions.
• Conduct ST&E activities and present risk findings to leadership.
• Support CCRI/SAV/CVPA with corrective action plans and closure tracking.
• Mentor junior ISSOs and interpret DoD policy.
• Contribute to Policy Compliance and Risk Assessment reports.

Skills

RMF/DIACAP

STIGs/SRGs

Vuln analysis

eMASS

Mentorship

Stakeholder comms

Discipline DoD policy

Education

Bachelor’s degree in Cybersecurity or related field

Master’s degree in Cybersecurity (preferred)

Tools

ACAS

HBSS

CMRS

eMASS

Job description

Information System Security Officer, (ISSO)

Cinteot

2 months ago

Hybrid

Full Time

Intermediate or Experienced

Fort Meade, MD, United States

About Cinteot

Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access controls, and construction/facilities.

We are a Woman-owned, SBA Certified 8(a), and HUBZone company.

About the job

Position Summary:

The Information System Security Officer (ISSO) provides senior-level cybersecurity engineering and compliance support to the Defense Information Systems Agency (DISA) Internet Enterprise (IE) under the CTAS Task Order. This role is responsible for ensuring mission systems achieve and sustain Authorization to Operate (ATO) through implementation of the Risk Management Framework (RMF) and transition from legacy DIACAP requirements. The ISSO – Level 3 acts as both a technical and compliance leader, bridging vulnerability management, STIG/SRG application, and documentation development to create complete and accurate accreditation packages. This position serves as a senior-level resource, providing mentorship to mid-level and junior ISSOs, while interfacing with Government stakeholders, Information System Security Managers (ISSMs), and Authorizing Officials (AOs).

Key Responsibilities:

The ISSO is expected to perform duties that span both hands-on technical tasks and high-level compliance oversight. Core responsibilities include:

• Leading the development, maintenance, and validation of RMF and A&A artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), configuration management records, and testing documentation.
• Implementing and validating compliance with DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) to maintain technical baselines across supported systems.
• Managing and analyzing results from vulnerability scanning and compliance tools such as ACAS, HBSS, and CMRS, and ensuring timely remediation of findings in accordance with IAVM directives.
• Preparing and submitting comprehensive accreditation packages in eMASS, ensuring accuracy, completeness, and timeliness of submissions to meet contract and PWS requirements.
• Conducting and documenting Security Test and Evaluation (ST&E) activities, ensuring objective assessment of control implementation and risk posture.
• Supporting and preparing for Command Cyber Readiness Inspections (CCRI), Security Assessment Visits (SAV), and Cooperative Vulnerability Penetration Assessments (CVPA) by creating corrective action plans, briefing results, and tracking closure of findings.
• Providing mentorship and guidance to junior ISSOs, ensuring proper interpretation of DoD cybersecurity policy and consistent application of standards across the team.
• Contributing to recurring deliverables such as Policy Compliance Reports, Risk Assessment Reports, and Directorate-level cybersecurity briefings, ensuring all outputs meet QASP Acceptable Quality Levels (AQLs).

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Information Technology, or related field.
• Must hold and maintain an appropriate DoD 8140.03 / 8570.01-M certification baseline for this labor category (e.g., Security+, CISSP, CISM, or equivalent as required).
• At least 7 years of experience in cybersecurity engineering, RMF/DIACAP accreditation, and compliance documentation in DoD environments.
• Expertise in the application of DISA STIGs/SRGs, ACAS/HBSS vulnerability analysis, and eMASS package preparation.
• Strong written and verbal communication skills, with demonstrated experience producing accreditation documentation and presenting risk findings to senior stakeholders.

Desired Qualifications:

• Master’s degree in Cybersecurity or related discipline.
• Experience supporting DISA programs and preparing for CCRI inspections.
• Advanced certifications such as CISSP-ISSAP or CISM.

Clearance Requirement:

Active Top Secret

Benefits:

• Health Insurance
• Vision Insurance
• 401(k) Matching
• Paid Time Off (PTO)
• Paid Holidays
• Life Insurance
• Birthday PTO
• Education Reimbursement

Preferred Skills

ISSO

• Complete Insurance Coverage
• 401k with Company Contribution
• Tuition Reimbursement
• Generous Paid Time Off (including your birthday!)

Cinteot is an Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.