Information Systems Security Officer

Tharros; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability coverage

Retirement savings

Paid leave

Education reimbursement

Referral bonuses

Job summary

Tharros, a leader in cybersecurity services, seeks an Information System Security Officer (ISSO) to independently own security postures for DHS Intelligence Enterprise systems, including cross-domain and cloud environments, per ICD 503 and DHS 4300C. On-site in a Government SCIF in Washington, DC.

You will develop ATO packages, perform RMF-related assessments, manage POA&Ms and risk exceptions, conduct audits, and report metrics to ISSMs. A TS clearance with SCI eligibility is required.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' IT/cybersecurity experience.
• Minimum of 3 years' experience as an ISSO or in RMF package ownership.
• Active Top Secret clearance with SCI eligibility.
• Knowledge of RMF, NIST SP 800-37/53, and ICD 503.
• Experience with Cross Domain Solutions engineering and governance.

Responsibilities

• Create and maintain ATO packages for assigned systems in the GRC tool and monitor compliance.
• Perform self-assessments of on-premise and cloud systems against A&A SOP.
• Manage POA&Ms, waivers, and risk exceptions; provide weekly or bi-weekly reports.
• Perform audit log reviews; respond to NOSC alerts; ensure periodic scanning.
• Coordinate system changes through IATT requests; participate in CM Board as needed.
• Facilitate contingency plan tests and submit CPEM reporting.
• Deliver ISSO reports to ISSMs and system owners; mentor junior ISSOs.
• Serve as SCIF ISCR and support DoD security posture.

Skills

RMF knowledge

NIST SP 800-37/53

Cross Domain Solutions governance

DevSecOps & Agile

Strong communication

Portfolio management

Education

BS degree in IT, Cybersecurity, Information Systems, or Computer Science

Tools

RSA Archer

eMASS

Job description

Tharros is looking for courageous team members that enable government missions to move forward with confidence.

Who We Are

At Tharros, expertise, confidence and continuous advancement are at the foundation of what we do. With us, you work with the world’s preeminent vulnerability experts to not only advance government missions, but also your own career path. We’re looking for confident leaders to grow and evolve as we do, protecting our nation’s protectors with cutting-edge cybersecurity tools.

Seeing everything includes seeing everyone. Tharros moves missions forward with a courageous team of experts and a variety of perspectives.

Outperform

Lead with Growth

Dare to Secure

At Tharros, we have exceptional benefits because our employees’ success is our success. We support our team members’ growth with training opportunities, tools and resources.

Outperform the Expected

Tharros sets high standards because we know our team can meet and exceed them. We anticipate success, expect exceptional results and ensure impact for everyone.

Lead with Continuous Growth

When our employees grow, everyone thrives. As the leaders in vulnerability research, we grow capability for our clients and our employees.

Dare to Secure Anything

At the cutting-edge of cybersecurity technology, Tharros dares to create tools that will have maximum mission impact. Our company culture reflects this confidence.

Benefits of Working with Tharros

Moving boldly forward requires a strong foundation. Tharros provides foundational benefits that help our employees grow and thrive.

To be the best, you join the best. Tharros offers competitive compensation and comprehensive benefits including medical, dental, vision and disability coverage, savings & retirement and paid leave.

At Tharros, leaders develop leaders. Working at Tharros gives our employees access to resources and expertise found nowhere else, and we nurture the future leaders in cybersecurity from within our ranks.

We’re not afraid to show our commitment to growing our Tharros team. We offer generous referral bonuses to employees who help us reach hiring goals.

Training & Certification Reimbursement

Tharros is always advancing. We offer an education reimbursement benefit of up to $5,250 per year to help our employees thrive.

Breaking Barriers to Cybersecurity Success

Our people-first culture enables more flexibility for our employees to find success in cyber fields. At Tharros, there are no barriers between you, the world’s leading cybersecurity experts, and our customers.

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise.

In support of this mission, we have an immediate opportunity for an Information System Security Officer (ISSO). In this role you will independently own the security posture of a portfolio of DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted systems, in accordance with ICD 503 and DHS 4300C. You will maintain ATO packages, manage POA&Ms and change control, and serve as a SCIF Information Security Compliance Representative (ISCR). This position is on-site in a Government SCIF in Washington, DC.

• Create and maintain ATO packages for assigned systems in the GRC tool and monitor their compliance.
• Perform self-assessments of assigned on-premise and cloud systems against the A&A SOP.
• Manage POA&Ms, waivers, and risk exceptions; provide weekly or bi-weekly activity reports.
• Perform audit log reviews at least weekly, respond to NOSC alerts, and ensure periodic scanning.
• Coordinate system changes through IATT requests and serve on the Configuration Management Board when designated.
• Facilitate annual contingency plan tests and submit quarterly CPEM reporting.
• Deliver ISSO reports (incident response, POA&M, ConMon metrics) to ISSMs and system owners.
• Serve as SCIF ISCR and mentor junior ISSOs.

Requirements:

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in IT or cybersecurity.
• Minimum of 3 years' experience as an ISSO or in RMF package ownership.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of the Risk Management Framework (RMF), NIST SP 800-37, NIST SP 800-53, and ICD 503.
• Knowledge of Cross Domain Solution engineering and governance, including NCDSMO mandates and Raise the Bar requirements.
• Knowledge of hybrid classified/unclassified, on-premise and cloud environments, DevSecOps, and agile methodologies.
• Skill in securing Linux and Windows operating systems and cloud technologies.
• Skill in managing change control and authorization impacts.
• Ability to independently manage a portfolio of systems.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.
• CGRC (formerly CAP), CompTIA Security+, or CySA+ certification.
• Experience with RSA Archer, eMASS, or a similar GRC tool.

Equal Opportunity Employment

Tharros is committed to implementing employment programs and policies dedicated to equal employment opportunity and nondiscrimination. Learn more today.

Be Bold with Tharros

Want to learn more about what it means to work with the world’s preeminent cyber vulnerability experts? Contact us to learn more about who we are and how you can join us.