Information System Security Officer - ISSO Analyst

Securepro Inc; Washington (District of Columbia); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Job summary

SecurePro is seeking a motivated ISSO Analyst to support a federal cybersecurity program in Washington, DC. This hands-on, on-site role provides exposure to RMF activities, vulnerability management, and compliance documentation for a portfolio of 32 FISMA Moderate systems.

The ideal candidate has foundational cybersecurity knowledge, familiarity with NIST security frameworks, and a willingness to learn federal cybersecurity processes and technologies.

Qualifications

• 1–3 years of cybersecurity experience in related fields.
• Foundational knowledge of cybersecurity principles and risk management concepts.
• Basic understanding of NIST SP 800-53 and RMF processes.

Responsibilities

• Assist with RMF implementation for FISMA Moderate systems.
• Maintain SSPs, SARs, RARs, POA&Ms and supporting evidence.
• Track vulnerabilities and remediation with Nessus/Qualys/ACAS.
• Support continuous monitoring and security control assessments.
• Review vulnerability scans and track remediation efforts.
• Support Splunk log review and security monitoring.
• Assist with cybersecurity audit and evidence collection.

Skills

Cybersecurity experience

RMF knowledge

NIST RMF familiarity

Education

Bachelor's degree in Cybersecurity/IT/CS

Job description

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance

SecurePro is seeking a motivated and detail-oriented Information System Security Officer (ISSO) Analyst to support a federal cybersecurity program in Washington, DC. The team provides cybersecurity and compliance support across a portfolio of approximately 32 FISMA Moderate information systems.

The ISSO Analyst will work alongside Senior and Lead ISSOs to support Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, Plan of Action and Milestones (POA&Ms) tracking, security documentation, audit preparation, and federal cybersecurity compliance.

This is a hands-on, on-site position designed for an early-career cybersecurity professional looking to develop experience in federal information security, security assessment and authorization, and compliance operations.

The ideal candidate has a foundational understanding of cybersecurity principles, familiarity with NIST security frameworks, strong organizational skills, and a willingness to learn federal cybersecurity processes and technologies.

Key Responsibilities

• Assist Senior and Lead ISSOs with implementation and maintenance of the NIST SP 800-37 Rev. 2 Risk Management Framework (RMF) for FISMA Moderate systems.
• Support the development, review, and maintenance of cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), POA&Ms, and supporting assessment evidence.
• Track security vulnerabilities, findings, remediation activities, and POA&Ms milestones under the direction of senior cybersecurity personnel.
• Assist with continuous monitoring activities, security control assessments, and compliance reporting.
• Review vulnerability scan results and help track remediation efforts using tools such as Tenable Nessus, Qualys, or ACAS.
• Support security logging and monitoring activities using Splunk, including reviewing logs and identifying potential security issues.
• Assist with maintaining cybersecurity authorization and compliance records in CSAM.

Required Qualifications

• U.S. citizenship required.
• Ability to obtain and maintain a Tier 4 High Risk Public Trust.
• 1–3 years of experience in cybersecurity, information security, IT security, security compliance, or a related technical field.
• Foundational knowledge of cybersecurity principles, information security controls, and risk management concepts.
• Basic understanding of NIST SP 800-53 security controls and the NIST Risk Management Framework (RMF).

Preferred Qualifications

• Previous experience supporting a federal government agency, government contractor, or regulated IT environment.
• Exposure to federal cybersecurity compliance, FISMA, RMF, or Assessment and Authorization (A&A) activities.
• Familiarity with CSAM or similar Governance, Risk, and Compliance (GRC) platforms.

SECUREPRO ISSO Analyst / Position Description

SECUREPRO • CAREERS Page 3

• Experience or exposure to Splunk, ServiceNow, Tenable Nessus, Qualys, or ACAS.
• Familiarity with SSPs, SARs, POA&Ms, security control assessments, or authorization documentation.
• Understanding of NIST SP 800-37 Rev. 2, NIST SP 800-53, or NIST SP 800-53A.
• Basic knowledge of cloud security concepts, particularly AWS or Microsoft Azure.
• Familiarity with security incident management, log analysis, or vulnerability remediation.
• Experience assisting with cybersecurity audits, compliance reviews, or evidence collection.
• Exposure to Microsoft Defender, Entra ID, Intune, or other enterprise security technologies.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• An active cybersecurity certification such as CompTIA Security+, CySA+, ISC2 Certified in Cybersecurity (CC), or SSCP.
• Active federal Public Trust or security clearance.

Flexible work from home options available.