ISSO

Evlos Technology LLC; Corridor North (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Evlos Technology LLC seeks an Information System Security Officer to manage RMF processes and security controls for sensitive systems in the US. You will coordinate with the System Owner and SA, oversee privileged user access, and ensure accurate SSP/POAM documentation.

The role requires TS/SCI with polygraph clearance, U.S. citizenship, and deep familiarity with RMF tools such as LATTEART, XACTA, BISCOTTI, WATCHCAT, and STE, plus NIST guidance.

Qualifications

• Security clearance TS/SCI w/ Polygraph and U.S. Citizenship required.
• Experience with RMF and RMF tools in DoD/IC environments.
• Familiarity with NIST SP 800-53r3/800-37 and Continuous Monitoring.
• Ability to prepare documentation (SSP, POAM, SPFs, AAR).
• Collaborate with System Administrator and System Owner; oversight of privileged users.

Responsibilities

• Serve as Information Systems Security Officer for sensitive systems.
• Oversee RMF processes and security controls across the environment.
• Coordinate with SA and System Owner on security posture and risk.
• Maintain and update SSP, POAM, SPFs, and AAR documentation.
• Monitor and govern privileged user access and activities.

Skills

RMF

RMF Tools

NIST RMF

NIST SP 800-53r3/800-37

Continuous Monitoring

SSP/POAM Documentation

Authority to Operate

Collaboration with SA/System Owner

Privileged User Oversight

Tools

LATTEART

XACTA

BISCOTTI

WATCHCAT

STE

Job description

CLEARANCE REQUIRED: TS/SCI w/ Polygraph

Other Requirements: U.S. Citizenship

Information System Security Officer • Technical Skills: RMF & RMF tools such as LATTEART, XACTA, BISCOTTI, WATCHCAT, STE, • Scanning tools (Compliance and Configuration), NIST SP 800-53r3 and/or 5, NIST 800-37 • Understanding of the full RMF Process, Authority to Operate, Security Controls, Continuous Monitoring processes • Documentation (SSP, POA&M, SPFs for exceptions, BIA, CMP, AAR, CP, SAR, RAR) • Collaboration with SA and System Owner, Privileged user oversight