ISSO

Zohorecruit; Shiloh (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

Zohorecruit seeks a security professional to own RMF/ATO for DoD information systems at Scott Air Force Base.

You will develop SSPs, manage POA&Ms, submit ATO packages, and coordinate with ISSEs and SecOps while leveraging eMASS. 3–5 years RMF/ATO experience in a DoD/federal environment is expected, with a DoD 8140 education option and a bachelor’s degree preferred.

Qualifications

• 3–5 years of RMF/ATO experience within DoD or federal environments.
• Hands-on experience with eMASS.
• Working knowledge of NIST SP 800-53r5 and DoD RMF processes.
• Demonstrated ability to independently author SSPs and manage POA&Ms.

Responsibilities

• Develop, maintain, and update System Security Plans (SSPs) for assigned systems.
• Manage POA&Ms from identification through remediation and closure.
• Submit Authorization to Operate (ATO) packages.
• Utilize eMASS for GRC management and RMF workflow tracking.
• Coordinate with ISSEs and SecOps to validate control implementations.
• Develop SecurityAssessment Plans (SAPs) and support SAR coordination.
• Draft supply chain risk management plans.
• Support the Cybersecurity Architect with RMF strategic planning.

Skills

RMF/ATO experience

eMASS

NIST SP 800-53r5

DoD RMF processes

SSP authoring

POA&Ms management

Education

Bachelor’s degree (CS/Cybersecurity/IT)

DoD 8140 interim education options

Tools

eMASS

RMF tooling

Job description

Scott Air Force Base, United States | Posted on 07/02/2026

• Own theday-to-day security authorization posture of assigned DoD information systems
• Work within awell-resourced team with dedicated engineering, operations, and architecturesupport
• Directly supportmission continuity by managing ATO packages and continuous monitoring programs
• Grow into asenior GRC role with clear advancement pathways

Responsibilities

• Develop,maintain, and update System Security Plans (SSPs) for assigned systems
• Manage POA&Msfrom identification through remediation and closure
• Compile andsubmit Authorization to Operate (ATO) packages
• Utilize eMASS forGRC management and RMF workflow tracking
• Coordinate withISSEs and SecOps to validate control implementations
• Develop SecurityAssessment Plans (SAPs) and support SAR coordination
• Draft supplychain risk management plans
• Support theCybersecurity Architect with RMF strategic planning

Qualifications

Required:

• 3–5 years ofRMF/ATO experience within DoD or federal environments
• Hands-onexperience with eMASS
• Working knowledgeof NIST SP 800-53r5 and DoD RMF processes
• Demonstratedability to independently author SSPs and manage POA&Ms

Required Certification:

Desired Certification:

• DoD 8140.03M DCWFIntermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE,FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+

Required Education:

• DoD 8140 InterimEducation Options

Desired Education:

• Bachelor’s degreein Computer Science, Cybersecurity, Data Science, Information Systems,Information Technology, or Software Engineering
• Experience witheMASSer or similar RMF automation tooling
• Exposure tocloud-hosted or hybrid system authorization boundaries
• Familiarity withthe DoD RMF Knowledge Service