ISSM Assistant: RMF, STIGs & ATO Support

JASINT Consulting and Technologies, LLC; Fort Meade (MD); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

401k/Retirement

Health, dental, vision

FSA/HSA

Paid time off

Tuition reimbursement

Professional development

Spot awards

Birthday day off

Job summary

JASINT Consulting and Technologies, LLC is seeking a seasoned RMF/ISSO professional to conduct RMF assessments, implement countermeasures, and support the full RMF lifecycle from categorization to monitoring. The role requires DoD ISSM experience and access to JWICS/SIPR, with responsibilities spanning risk assessment and compliance governance.

The candidate will maintain the eMASS repository and ensure the ATO remains current, while monitoring ESS security posture and guiding remediation

Qualifications

• At least 5 years of DoD experience performing ISSM duties on DoD information systems.
• At least 3 years as an operating system administrator or auditor.
• Working knowledge of DoD STIGs, ICD, NIST, ISO, and CNSS.
• Demonstrated ability to assess business risk, classify threats, and improve security controls.
• Must have JWICS and SIPR access.

Responsibilities

• Conduct RMF assessments and implement countermeasures.
• Help authorize hardware and software under RMF.
• Support the ISSM/ISO through the full RMF lifecycle: categorize, select, implement, assess, authorize, and monitor.
• Monitor the Electronic Security System (ESS) security posture.
• Assess vulnerabilities using SCAP, ACAS, and HBSS.
• Analyze STIGs and develop a compliance strategy.
• Build POA&Ms for risks that can’t be fixed because of operational constraints.
• Maintain the eMASS repository and keep the ATO current.

Skills

DoD ISSM experience

OS admin

Auditor

DoD STIGs knowledge

NIST/ISO/CNSS knowledge

JWICS access

SIPR access

Job description

JASINT Consulting and Technologies, LLC is seeking a seasoned RMF/ISSO professional to conduct RMF assessments, implement countermeasures, and support the full RMF lifecycle from categorization to monitoring. The role requires DoD ISSM experience and access to JWICS/SIPR, with responsibilities spanning risk assessment and compliance governance.

The candidate will maintain the eMASS repository and ensure the ATO remains current, while monitoring ESS security posture and guiding remediation