ISSO: DoD Classified Systems Security Lead (TS/SCI eligible)

Amentum; Virginia Beach (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Amentum is seeking an Information System Security Officer (ISSO) to join our team at Fort Meade, MD. You will lead RMF efforts, manage security packages, and coordinate with assessors, maintaining robust security baselines for classified systems.

You will work on day-to-day security posture, incident response, and continuous monitoring, ensuring compliance with IC policy, NIST standards, and authorization processes across integrated teams.

Qualifications

• Hands-on experience managing system records, controls, artifacts, and POA&Ms in eMASS.
• Experience supporting classified networks, cross-domain solutions, or multi-enclave environments.
• Familiarity with IC tools and processes for reciprocity and enterprise authorization.
• Experience briefing AOs, program managers, and senior leadership.
• Strong understanding of security control families and how to interpret implementation, inheritance, and assessment procedures.
• Ability to translate technical findings into clear risk statements.
• Excellent written communication with attention to detail in documentation.
• Ability to manage multiple packages and deadlines.
• Sound judgment handling classified and sensitive information.
• Working knowledge of RMF, NIST SP 800-37/800-53/800-53A, CNSSI 1253, ICD 503.
• Thorough knowledge of IC and national security information system policy.

Responsibilities

• Support RMF steps (categorize, select, implement, assess, authorize, monitor) for assigned systems.
• Maintain accurate system records in the governance, risk, and compliance tool (eMASS).
• Develop and maintain authorization packages (SSP, control statements, POA&M, contingency and configuration plans).
• Coordinate with assessors and officials through initial authorization, reauthorization, and continuous monitoring.
• Review vulnerability scans, audit logs, and baselines; coordinate remediation and POA&M closure.
• Verify patching and antivirus/endpoint protection meet timelines and baselines.
• Prepare for inspections, audits, and assessments by IG, security office, and oversight bodies.
• Ensure changes undergo security impact analysis and CCR review before implementation.
• Detect and report security incidents; support containment after data spillage.
• Assist insider threat and audit data requests; verify clearance and access need-to-know.
• Oversee privileged accounts and enforce least privilege; brief users on security responsibilities.
• Enforce media handling and destruction procedures; support cross-domain data transfer.
• Verify systems installed in accredited spaces per ICD 705 and facility accreditation.
• Advise on security requirements during design, acquisition, and development; participate in security reviews.
• Maintain current IC/DoD policy knowledge; collaborate in working groups; manage multiple systems and deadlines.

Skills

eMASS POA&M management

ATO packages

Cross-domain solutions

ACAS

STIG Viewer

RMF

NIST SP 800-37/53

IC policy familiarity

Security risk translation

Technical documentation

Independent work

Education

Bachelor's degree in cybersecurity/IS/CS

Tools

C2S/cloud security tools

Job description

Amentum is seeking an Information System Security Officer (ISSO) to join our team at Fort Meade, MD. You will lead RMF efforts, manage security packages, and coordinate with assessors, maintaining robust security baselines for classified systems.

You will work on day-to-day security posture, incident response, and continuous monitoring, ensuring compliance with IC policy, NIST standards, and authorization processes across integrated teams.