Information Systems Security Officer (ISSO) | On-Site | Contingent

Ares Enterprise; Fairfax (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Ares Enterprise, LLC is seeking a dedicated ISSO/RMF Specialist to support defense intelligence communication systems. You will manage RMF lifecycle, maintain ATO status, and coordinate with AOs and P-ISSMs to ensure robust security governance and compliance.

Responsibilities include developing RMF documentation, administering eMASS, and overseeing continuous monitoring and STIG remediation to safeguard critical intelligence data for senior leaders worldwide.

Qualifications

• 5+ years of hands-on RMF experience on DoD IT systems.
• Must possess DoD 8570/8140 IAT II certifications (e.g., Security+, CCNA, RHCSA).
• Top Secret/SCI clearance and US citizenship are required.

Responsibilities

• Lead RMF lifecycle activities from system categorization to authorization with continuous ATO.
• Develop and maintain RMF artifacts (SSP, SAR, POA&M).
• Administer security posture in eMASS and ensure data integrity and timely approvals.
• Implement continuous monitoring and track vulnerabilities.
• Coordinate with AO/AODR and P-ISSMs to support A&A and remediate STIG findings.
• Assist in ensuring DoD, Army, and NIST compliance.

Skills

RMF implementation

eMASS administration

Security documentation

Vulnerability scans

DoD/NIST compliance

Stakeholder coordination

ATO maintenance

Education

DoD 8570/8140 IAT II certifications

Tools

ACAS/Nessus

SCAP tooling

Job description

Description

Ares Enterprise, LLC is seeking a dedicated Information Systems Security Officer (ISSO) / RMF Specialist to support vital defense intelligence communication systems. This program delivers comprehensive mission support services focused on IT compliance, Tier 1 user assistance, and operational environment assessments to ensure the secure, reliable, and continuous delivery of critical intelligence data to senior leaders worldwide.

As the primary cybersecurity and compliance lead, you will manage complex IT and intelligence communication systems through the full Risk Management Framework (RMF) lifecycle. In this role, you will maintain secure operations, sustain continuous Authority to Operate (ATO) status, manage security postures within eMASS, and execute robust security governance in direct coordination with Authorizing Officials (AOs) and Program Information System Security Managers (P-ISSMs).

Requirements

Key Responsibilities

• RMF Lifecycle Management: Lead all aspects of the Risk Management Framework (RMF) process from system categorization and security control selection to implementation, assessment, and authorization, ensuring continuous Authority to Operate (ATO).
• Security Documentation: Develop, maintain, and update vital RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
• eMASS Administration: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring data accuracy and prompt workflow approvals.
• Continuous Monitoring: Implement and manage robust continuous monitoring strategies to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
• Stakeholder Coordination: Serve as a primary security advisor to system owners, liaising with Authorizing Officials (AO/AODR) and Program Information Security System Managers (P-ISSM) to navigate the Assessment and Authorization (A&A) process and remediate STIG findings.
• Compliance & COMSEC Support: Assist in developing cybersecurity programs, reviewing external policies, and ensuring adherence to DoD, Army, and NIST regulations.

Minimum Qualifications

• Experience: Minimum of 5+ years of dedicated, hands‑on experience applying RMF to complex Department of Defense (DoD) IT systems.
• Certifications: Must possess current, industry-standard certifications meeting DoD 8570/8140 requirements for IAT Level II (e.g., CompTIA Security+, CCNA, RHCSA, MCSA).
• Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
• Security Clearance: Must possess and actively maintain a Top Secret/SCI security clearance.
• Citizenship: Must be a U.S. citizen.