Information Systems Security Officer (ISSO)

Mount Mary University; Washington (District of Columbia); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Dynamic Solutions Technology, LLC is seeking an Information Systems Security Officer (ISSO) in Washington, DC for a full-time, exempt hybrid role. The candidate will support RMF for federal IS, develop and maintain SSPs/SARs/POA&Ms, and coordinate with system owners.

The role requires Security+ or DoD 8140/8570 certification, 6+ years in security, and hands-on RMF experience across control implementation, assessment, and continuous monitoring. Strong tool familiarity is expected.

Qualifications

• Bachelor's-level technical education and a cybersecurity certification are required.
• Security+ or equivalent per DoD 8140/8570; higher certifications preferred.
• Minimum 6 years in information systems security and RMF support.
• Hands-on RMF experience: control implementation, assessment, and ATO docs.
• Experience with RMF artifacts: SSPs, SARs, POA&Ms, risk assessments.

Responsibilities

• Support RMF implementation, maintenance, and artifacts for federal IS.
• Develop, review, and maintain SSPs, SARs, POA&Ms, and risk docs.
• Assist with categorization, control implementation, and authorization activities.
• Support ConMon, vulnerability management, audits, and remediation.
• Monitor security posture and drive corrective actions.
• Track POA&Ms, risks, and vulnerabilities; coordinate remediation.
• Coordinate with system owners and stakeholders to resolve deficiencies.
• QC RMF deliverables and ensure compliance with federal requirements.
• Participate in technical reviews and governance meetings; provide status updates.
• Maintain proficiency with cybersecurity tools and platforms (CSAM, Splunk, ServiceNow, Tenable/Nessus, Qualys, Defender, Intune, BigFix, Azure, M365, Entra ID, Okta, Palo Alto Panorama, Zscaler).

Skills

RMF knowledge

Security monitoring

Vulnerability management

SSP development

NIST RMF / 800-53

Education

Bachelor's-level technical education

Security+ or DoD 8140/8570 cert

CISSP / CAP / CISM / CASP+ / CCSP / GIAC preferred

Tools

CSAM

Splunk

ServiceNow

Tenable/Nessus

Qualys

Microsoft Defender

Intune

BigFix

Azure

Microsoft 365

Entra ID

Okta

Palo Alto Panorama

Zscaler

Job description

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Information Systems Security Officer (ISSO) to support the government customer located in Washington, DC. This is an exempt hybrid remote position. (A minimum of TWO days per week reporting to site; additional support as needed on a case-by-case basis)

MUST BE A U.S. CITIZEN

Responsibilities

• Support the implementation, maintenance, and continuous improvement of the Risk Management Framework (RMF) for assigned Federal information systems.
• Develop, review, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, control narratives, risk assessments, and supporting evidence.
• Assist with system categorization, security control implementation, control assessments, authorization activities, and preparation of ATO documentation.
• Support Continuous Monitoring (ConMon), vulnerability management, configuration reviews, security assessments, audits, inspections, and cybersecurity remediation activities.
• Monitor system security posture and analyze security, vulnerability, configuration, and compliance data to identify deficiencies and recommend corrective actions.
• Maintain and track POA&M items, risks, vulnerabilities, findings, and security issues; coordinate remediation activities and elevate overdue or high-risk issues.
• Coordinate with System Owners, common-control providers, system administrators, cloud-service personnel, and other cybersecurity stakeholders to obtain evidence and resolve security deficiencies.
• Conduct quality-control reviews of RMF deliverables and security documentation to ensure accuracy, completeness, consistency, and compliance with applicable Federal cybersecurity requirements.
• Participate in technical reviews, cybersecurity working groups, governance meetings, and incident-response coordination activities, providing technical input and status updates.
• Maintain working proficiency with applicable cybersecurity tools and platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Intune, BigFix, Azure, Microsoft 365, Entra ID, Okta, Palo Alto Panorama, and Zscaler, as required by the task order.

Education, Certifications, and Experience

• Bachelor's-level technical education and a cybersecurity certification meeting the applicable contract and Federal qualification requirements are required.
• Security+ or an equivalent certification meeting applicable DoD 8140/8570 requirements is required, with higher-level certifications such as CISSP, CAP, CISM, CASP+, CCSP, or GIAC certifications preferred based on assigned duties.
• Minimum of 6 years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline
• Minimum of 5 years of hands-on experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, continuous monitoring, POA&M management, and security documentation.
• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts.
• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities.
• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA, and applicable Federal and DoD cybersecurity policies.
• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler, with specific tools subject to task-order requirements.