Information Systems Security Officer - Contingent

Ares Enterprise; Fairfax (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Ares Enterprise is seeking an Information Systems Security Officer (ISSO) to support Air Force Sensitive Compartmented Information cybersecurity initiatives and implement the RMF lifecycle. The role works with the ISSM to ensure security compliance, manage SSPs, POA&Ms, and vulnerability management across DoD networks.

The ideal candidate will hold a TS/SCI clearance, complete required DoD cyber certifications within 45 days, and communicate complex security concepts to leadership and staff.

Qualifications

• Requires TS/SCI clearance with ability to start before employment date.
• DCWF aligned to ISSM level: 722 – Intermediate.
• DoD 8140/8570 baselines and training to be completed within 45 business days of hire.
• U.S. citizenship is required.
• Fluency in English, both written and spoken.

Responsibilities

• Execute day-to-day security control implementation, SSP updates, and RMF lifecycle for unclassified, secret, and sensitive space networks.
• Run ACAS vulnerability scans and document, mitigate, or remediate findings per DoD/Air Force guidance.
• Draft and process POA&Ms and Security Impact Assessments (SIAs).
• Maintain ports/protocols/services inventories and eMASS artifacts.
• Monitor and respond to cybersecurity incidents and NDCI events; update posture and documentation for classified spaces and VTC systems.
• Support continuous monitoring, self-inspections, and CCRI readiness.
• Train Cybersecurity Liaisons and end users on cybersecurity requirements and policies.

Skills

Technical communication

RMF knowledge

Cybersecurity

Tools

ACAS

eMASS

DISA STIGs

Job description

Description

We are seeking a highly qualified Information Systems Security Officer (ISSO) to join our Cybersecurity team. This role will support Air Force Sensitive Compartmented Information (AFSCI) cybersecurity initiatives and assist in executing the Risk Management Framework (RMF) lifecycle. The successful candidate will work closely with the Information Systems Security Manager (ISSM) to ensure system security compliance, manage System Security Plans (SSPs), process Plans of Action and Milestones (POA&Ms), and execute day-to-day vulnerability management.

Requirements

Key Responsibilities

• Execute the day-to-day implementation of security controls, system security plans (SSP), and Risk Management Framework (RMF) processes for unclassified, secret, and sensitive compartmented information networks.
• Run and analyze Assured Compliance Assessment Solution (ACAS) vulnerability scans to ensure vulnerabilities identified by the Department of Defense (DoD) and Air Force are documented, mitigated, or remediated.
• Draft and process Plans of Action and Milestones (POA&Ms) and Security Impact Assessments (SIAs).
• Maintain and update ports, protocols, and services (PP&S) spreadsheets and eMASS artifacts.
• Monitor, track, and support responses to Negligent Discharge of Classified Information (NDCI) and cybersecurity incidents.
• Maintain security posture and documentation for classified spaces and video teleconferencing (VTC) systems.
• Support continuous monitoring efforts, security self-inspections, and preparation for Command Cyber Readiness Inspections (CCRI).
• Assist in training unit Cybersecurity Liaisons (CLs) and end users on cybersecurity requirements, policies, and best practices.

Minimum Requirements

• Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI) clearance prior to start date.
• DCWF Alignment: Meets DoD Cyber Workforce Framework (DCWF) qualifications for ISSM (722) – Intermediate.
• DoD 8140/8570 Compliance: Possess required commercial baseline cybersecurity certifications and complete required training/qualifications within 45 business days of hire.
• Citizenship: U.S. Citizenship is required.
• Language: Fluency in spoken and written English.

Preferred Qualifications And Skills

• Hands-on experience with Enterprise Mission Assurance Support Service (eMASS), ACAS, and DISA STIGs.
• Direct experience supporting Air Force, Space Force, or DoD enterprise cybersecurity posture.
• Familiarity with NIST Special Publications (NIST SP 800-37, NIST SP 800-53) and DoDI 8510.01 / AFI 17-101 guidelines.
• Strong technical communication skills and the ability to interface with government leadership, system administrators, and security officers.

About Ares Enterprise

Ares Enterprise, LLC is a Woman-Owned Small Business delivering innovative information technology solutions and professional services to Federal Government customers. Our capabilities include enterprise IT operations, cybersecurity, cloud modernization, application development, IT service management, and mission-focused technology solutions.

We seek experienced professionals who combine technical expertise, leadership, accountability, and a commitment to delivering exceptional service to our government customers.

Ares Enterprise is an Equal Opportunity Employer. All qualified applicants receive consideration for employment in accordance with applicable employment laws.