ISSO - Cloud RMF Expert for DoD IL5 AWS

ECS Corporate Services; Fairfax (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS in Fairfax, VA seeks an experienced Information System Security Officer (ISSO) to lead RMF activities for an AWS IL5 environment supporting CUI and multiple MPEs. The ISSO will coordinate with ISSM, cloud and systems engineers, and government teams to prepare for IATT and ATO.

The ideal candidate has hands-on ISSO experience with DoD RMF, NIST 800-53, eMASS, and ACAS/Nessus, plus AWS DoW security expertise and strong documentation skills.

Qualifications

• Hands-on experience with DoD RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring activities.
• Working knowledge of AWS security and compliance concepts in cloud environments.
• Practical understanding of secured IT infrastructure including AWS, Kubernetes, Linux, Windows, Entra ID/Active Directory, networking, authentication, endpoint security, logging, and monitoring.
• Ability to develop and maintain cybersecurity documentation including System Security Plans, control implementation statements, POA&Ms, risk documentation, policies, procedures, SOPs, and continuous monitoring artifacts.
• Hands-on experience with ACAS/Nessus, including credentialed scanning, vulnerability analysis, scan configuration, troubleshooting scan coverage or authentication issues.
• Ability to analyze DTOs, CVEs, cybersecurity directives, and vulnerability notifications for system exposure using ACAS/Nessus and other information.
• Experience reviewing and validating DISA STIGs, security configuration evidence, remediation documentation, mitigations, and vulnerability closure evidence.
• Ability to work with engineers to validate security controls, investigate findings, determine remediation approaches, and collect evidence for RMF requirements.

Responsibilities

• Support RMF activities for the AWS IL5 environment throughout system development, IATT, ATO, and continuous monitoring.
• Develop and maintain authorization artifacts, including security plans, control evidence, vulnerability documentation, diagrams, inventories, risk documentation, policies, procedures, and SOPs.
• Maintain eMASS records, including control implementation details, artifacts, assessment results, POA&Ms, risk documentation, and continuous monitoring evidence.
• Develop, maintain, and track POA&Ms for vulnerabilities, STIG findings, control deficiencies, assessment findings, and other cybersecurity risks.
• Review and validate DISA STIG artifacts and supporting evidence, including checklists, scan results, remediation evidence, mitigations, and closure documentation.
• Perform hands-on vulnerability analysis using ACAS/Nessus, including reviewing scan results, affected assets, credentialed scan status, plugin output, remediation guidance, and scan coverage.
• Evaluate DTOs, CVEs, cybersecurity directives, and vulnerability notifications to determine potential impact and adjust ACAS scans as needed.
• Work with engineering teams to validate vulnerabilities and remediation, track rescans, and maintain vulnerability/closure documentation.
• Review cybersecurity impact of new AWS services, Kubernetes workloads, software packages, architecture changes, and ensure authorization documents remain current.
• Support and validate endpoint security, logging, monitoring, IAM, configuration management, and other technical security controls in the environment.
• Coordinate cybersecurity and authorization activities with engineering, leadership, and government stakeholders.
• Other duties as assigned.

Skills

RMF DoD

NIST 800-53

eMASS

POA&Ms management

DISA STIGs

ACAS/Nessus

AWS security

Security documentation

Tools

ACAS/Nessus

eMASS

Kubernetes

Linux

Windows

Active Directory

Job description

Everforth ECS in Fairfax, VA seeks an experienced Information System Security Officer (ISSO) to lead RMF activities for an AWS IL5 environment supporting CUI and multiple MPEs. The ISSO will coordinate with ISSM, cloud and systems engineers, and government teams to prepare for IATT and ATO.

The ideal candidate has hands-on ISSO experience with DoD RMF, NIST 800-53, eMASS, and ACAS/Nessus, plus AWS DoW security expertise and strong documentation skills.