ISSO: DoD RMF/A&A Cybersecurity Specialist

Sms-Data-Products-Group,-Inc; Edwards (CA); On-site; USD 90,000 - 110,000; Full time

Job summary

SMS DATA PRODUCTS GROUP, INC seeks an Information Systems Security Officer (ISSO) I to support the AFRL at Edwards Air Force Base. The ISSO I provides cybersecurity and RMF/A&A support through the system lifecycle, developing security docs, evaluating risk, and coordinating with government stakeholders to maintain DoD compliance.

Responsibilities include SSPs, POA&Ms, risk assessments, and RMF artifacts, plus vulnerability management using Nessus/SCAP/ACAS.

Qualifications

• 3+ years of cybersecurity, information assurance, information system security, or related experience.
• Working knowledge of DoD RMF and A&A processes including SSPs, POA&Ms, security controls, risk assessments, continuous monitoring, and authorization documentation.
• Familiarity with DoDI 8510.01, NIST guidance, DISA STIGs, and applicable DoD cybersecurity requirements.
• Experience supporting vulnerability assessment, security compliance, and remediation activities; familiarity with Nessus, SCAP, ACAS, or Tenable.
• Technical understanding of enterprise infrastructure, Windows, Linux, networking, and cybersecurity technologies.
• Strong documentation, analytical, organizational, and communication skills; able to coordinate across stakeholders.
• Ability to obtain/maintain DoD Secret Clearance and DoD 8140 workforce qualifications.
• Desirable: experience in DoD/AF/AFRL environments and RMF authorization packages.

Responsibilities

• Develop, maintain, and update SSPs, risk assessments, POA&Ms, and RMF/A&A artifacts.
• Categorize information systems and support security-control selection using DoDI 8510.01 and RMF baselines.
• Evaluate system risks and vulnerabilities and recommend mitigation strategies.
• Collaborate with system owners, administrators, cybersecurity personnel, assessors, and stakeholders.
• Ensure security controls are incorporated into system design and operations; support testing and gathering evidence.
• Use vulnerability tools to identify vulnerabilities, support remediation, and validate secure configurations.
• Validate systems against DISA STIGs, document deviations, coordinate corrective actions.
• Establish continuous monitoring and report system security posture to ISSM/AO.
• Maintain documentation for changes, incidents, deficiencies, and authorization decisions.
• Support assessment teams with required documentation, evidence, and access.

Skills

Cybersecurity

RMF/A&A

DoD RMF

NIST SP 800-60

Vulnerability assessment

Documentation

DoD 8140

IAT Level II

Tools

Nessus

SCAP

ACAS

Tenable

Job description

SMS DATA PRODUCTS GROUP, INC seeks an Information Systems Security Officer (ISSO) I to support the AFRL at Edwards Air Force Base. The ISSO I provides cybersecurity and RMF/A&A support through the system lifecycle, developing security docs, evaluating risk, and coordinating with government stakeholders to maintain DoD compliance.

Responsibilities include SSPs, POA&Ms, risk assessments, and RMF artifacts, plus vulnerability management using Nessus/SCAP/ACAS.