ISSO: DoD RMF, ACAS & ConMon Specialist

Apavo Corporation; Oakton (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Apavo Corporation is seeking an Information Systems Security Officer (ISSO) to ensure secure operation of multi-enclave IT and R&D systems in Oakton, VA. You will advise Information System Owners on security posture and drive continuous monitoring using ACAS and DoD tooling.

The role emphasizes hands-on governance, remediation planning, and collaboration with system admins and researchers to maintain ATO statuses without impacting critical experimentation.

Qualifications

• Bachelor's degree in Cybersecurity, IT, or related field with 5-7+ years as ISSO or senior RMF role.
• DoD 8570.01-M / 8140.03 IAM Level II or III (CAP, CISM, CASP+ CE, CISSP).
• Expert DoD RMF (DoDI 8510.01), NIST SP 800-53/800-37/800-171, DISA STIG knowledge.
• Experience managing ATO artifacts in eMASS or Xacta.

Responsibilities

• RMF Lifecycle Management: develop, maintain, and oversee RMF packages (SSP, SAR, RAR, SAP, POA&M) in systems of record.
• ACAS Operations & Vulnerability Management: run credentialed/non-credentialed ACAS scans and analyze results.
• POA&M & Remediation Advisory: translate findings into mitigation strategies and close POA&M items.
• ConMon: implement and oversee monitoring; review ACAS dashboards and logs for compliance.
• Air-Gapped & Multi-Enclave Support: enable secure data transfers and compliance for isolated enclaves.
• Security Assessments: perform routine checks with SCC, STIG Viewer, Evaluate-STIG; support CCRI and ATO validations.
• Incident Handling: coordinate with ISSM and IR teams on anomalies and data spillages.

Skills

RMF

ACAS

POA&M

ConMon

Air-gapped enclaves

Security assessments

Incident response

Education

Bachelor's degree in Cybersecurity, IT, or related field

Tools

eMASS

Xacta

Tenable.sc

Nessus

SCC

STIG Viewer

Evaluate-STIG

Splunk

Elastic

Job description

Apavo Corporation is seeking an Information Systems Security Officer (ISSO) to ensure secure operation of multi-enclave IT and R&D systems in Oakton, VA. You will advise Information System Owners on security posture and drive continuous monitoring using ACAS and DoD tooling.

The role emphasizes hands-on governance, remediation planning, and collaboration with system admins and researchers to maintain ATO statuses without impacting critical experimentation.