Information Systems Security Officer (ISSO)

Dynamic Solutions Technology LLC; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Dynamic Solutions Technology LLC, a premier strategic services firm, seeks an Information Systems Security Officer (ISSO) to support a government client in Washington, DC. This exempt hybrid role requires a U.S.

citizen, with at least two days per week on-site and additional case-by-case support as needed. Responsibilities include RMF implementation, SSP/SAR/POA&Ms development, continuous monitoring, vulnerability management, and security documentation oversight.

Qualifications

• Bachelor's degree in a technical field required.
• Security+ or equivalent DoD 8140/8570 certification required; higher certs preferred.
• Minimum 6 years in information systems security or related field.
• Minimum 5 years RMF experience with security control implementation and ATO artifacts.
• Experience developing SSPs, SARs, POA&Ms, risk assessments, and authorization packages.
• Familiarity with NIST SP 800-53, RMF, FISMA; knowledge of federal standards.

Responsibilities

• Support RMF implementation, maintenance, and artifacts for federal information systems.
• Develop, review, update, and maintain SSPs, SARs, POA&Ms, and risk assessments.
• Assist with system categorization, control implementation, assessments, and authorization activities.
• Support ConMon, vulnerability management, configuration reviews, audits, and remediation.
• Analyze security data to identify deficiencies and coordinate remediation with stakeholders.
• Maintain POA&Ms, risks, vulnerabilities, findings, and security issues; coordinate fixes.
• Coordinate with System Owners, cloud staff, and other cybersecurity stakeholders to obtain evidence.
• Conduct quality-control reviews of RMF deliverables and documentation for compliance.
• Participate in technical reviews, governance meetings, and incident-response coordination.
• Maintain proficiency with cybersecurity tools including CSAM, Splunk, ServiceNow, Tenable/Nessus, Qualys, Defender, Intune, BigFix, Azure, M365, Entra ID, Okta, Panorama, Zscaler.

Skills

RMF knowledge

Cybersecurity documentation

Risk management

Interagency collaboration

Education

Bachelor's degree in a technical field

Security+ or DoD 8140/8570 cert

CISSP/CISM/CASP+/GIAC preferred

Tools

CSAM

Splunk

ServiceNow

Tenable/Nessus or Qualys

Microsoft Defender

Microsoft Intune

BigFix

Azure

Microsoft 365

Entra ID

Okta

Palo Alto Panorama

Zscaler

Job description

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Information Systems Security Officer (ISSO) to support the government customer located in Washington, DC. This is an exempt hybrid remote position. (A minimum of TWO days per week reporting to site; additional support as needed on a case-by-case basis)

MUST BE A U.S. CITIZEN

Responsibilities:

• Support the implementation, maintenance, and continuous improvement of the Risk Management Framework (RMF) for assigned Federal information systems.
• Develop, review, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, control narratives, risk assessments, and supporting evidence.
• Assist with system categorization, security control implementation, control assessments, authorization activities, and preparation of ATO documentation.
• Support Continuous Monitoring (ConMon), vulnerability management, configuration reviews, security assessments, audits, inspections, and cybersecurity remediation activities.
• Monitor system security posture and analyze security, vulnerability, configuration, and compliance data to identify deficiencies and recommend corrective actions.
• Maintain and track POA&Ms items, risks, vulnerabilities, findings, and security issues; coordinate remediation activities and escal
• Coordinate with System Owners, common-control providers, system administrators, cloud-service personnel, and other cybersecurity stakeholders to obtain evidence and resolve security deficiencies.
• Conduct quality-control reviews of RMF deliverables and security documentation to ensure accuracy, completeness, consistency, and compliance with applicable Federal cybersecurity requirements.
• Participate in technical reviews, cybersecurity working groups, governance meetings, and incident-response coordination activities, providing technical input and status updates.
• Maintain working proficiency with applicable cybersecurity tools and platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Intune, BigFix, Azure, Microsoft 365, Entra ID, Okta, Palo Alto Panorama, and Zscaler, as required by the task order.

Education, Certifications, and Experience:

• Bachelor's-level technical education and a cybersecurity certification meeting the applicable contract and Federal qualification requirements are required.
• Security+ or an equivalent certification meeting applicable DoD 8140/8570 requirements is required, with higher-level certifications such as CISSP, CAP, CISM, CASP+, CCSP, or GIAC certifications preferred based on assigned duties.
• Minimum of 6 years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline.
• Minimum of 5 years of hands-on experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, continuous monitoring, POA&Ms management, and security documentation.
• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts.
• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities.
• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA, and applicable Federal and DoD cybersecurity policies.
• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler, with specific tools subject to task-order requirements.