ISSO

DANASTAR Professional Services, LLC; Washington (District of Columbia); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Eastbay Systems, LLC is seeking an Information Systems Security Officer (ISSO) to support federal cybersecurity programs, combining FISMA/RMF experience with hands-on GRC expertise and understanding of system security architectures.

The ISSO will work with security engineers, SOC analysts, and system owners to assess risks, validate controls, monitor posture, and coordinate remediation across cloud, on-prem, and DevSecOps environments.

Qualifications

• Experience in ISSO or technical GRC roles supporting federal programs.
• Strong knowledge of FISMA, RMF, and NIST SP 800-53 controls.
• Ability to analyze security findings and coordinate remediation.
• Excellent written and verbal communication.

Responsibilities

• Manage FISMA/RMF compliance activities and POA&Ms.
• Execute ISCM activities including control assessments and vulnerability tracking.
• Evaluate system security architectures and controls.
• Define logging/monitoring requirements with the SOC.
• Review user access and privileged accounts.
• Assess PPS baselines and identify security risks.
• Collaborate with security engineering, SOC, cloud, and DevSecOps teams.
• Support FedRAMP oversight, audits, and compliance reporting.

Skills

GRC experience

Continuous monitoring

FISMA/NIST RMF knowledge

Security communications

Education

Bachelor's degree or equivalent in Cybersecurity/CS/IT

Tools

SIEM

Vulnerability scanners

GRC platforms

Job description

Information Systems Security Officer (ISSO)

Company: Eastbay Systems, LLC (Previously DANASTAR Professional Services, LLC)

Location: Washington, DC

Job Type: Full-Time | Hybrid

Company Description

Eastbay Systems, LLC is an established IT and cybersecurity consulting firm supporting federal government agencies. We specialize in Cybersecurity Program Management, Governance, Risk & Compliance (GRC), Security Engineering, and Security Operations (SOC).

Role Description

We are seeking a technically proficient Information Systems Security Officer (ISSO) to support federal cybersecurity programs. The ideal candidate combines strong FISMA/RMF compliance experience with technical GRC expertise and a solid understanding of system security architectures, security controls, and continuous monitoring.

The ISSO will work closely with security engineers, SOC analysts, system owners, and administrators to assess security risks, validate controls, and maintain the security posture of assigned systems.

Key Responsibilities

• Manage FISMA/RMF compliance activities, security assessments, system documentation, and POA&Ms.
• Execute Information Security Continuous Monitoring (ISCM) activities, including security control assessments, vulnerability management, and risk remediation tracking.
• Understand and evaluate system security architectures, configurations, and technical security controls.
• Identify security logging and monitoring requirements and collaborate with the SOC to ensure appropriate log collection, monitoring, and coverage.
• Review user access, privileged accounts, authentication controls, and access management practices.
• Assess and maintain ports, protocols, and services (PPS) baselines and identify security risks.
• Collaborate with security engineering, SOC, cloud, and DevSecOps teams to identify gaps and implement corrective actions.
• Support ongoing authorization, FedRAMP oversight, audits, and compliance reporting.

Qualifications

• Experience as an ISSO or in a technical GRC, cybersecurity engineering, or federal cybersecurity compliance role.
• Strong knowledge of FISMA, NIST RMF, NIST SP 800-53, and continuous monitoring requirements.
• Technical understanding of network security, cloud environments, system architectures, logging, vulnerability management, and access controls.
• Familiarity with SIEM solutions, vulnerability scanners, security configuration tools, and GRC platforms.
• Ability to analyze technical security findings, assess risks, and coordinate remediation with engineering and operations teams.
• Strong communication, documentation, and organizational skills.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
• Security+, CISSP, CISM, CGRC, or similar certification preferred.
• Ability to satisfy federal background investigation and suitability requirements.

Equal Employment Opportunity

Eastbay Systems, LLC is an Equal Opportunity Employer. We provide equal employment opportunities without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected characteristic.