ISSO - DoD RMF/ATO Specialist (On-Site)

Leonardo DRS; San Diego (CA); On-site; USD 84,000 - 119,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement plan

Paid time off

9/80 work schedule

Job summary

Leonardo DRS is seeking an Information System Security Officer (ISSO) to safeguard on-site classified systems following RMF and DoD/DCSA standards. You will manage RMF artifacts, coordinate ATO packages via eMASS, and partner with ISSM, FSO, and security teams to ensure a resilient security posture.

The role requires hands-on security administration, vulnerability management, and strong communication skills to support mission objectives and maintain compliance across complex environments.

Qualifications

• Demonstrated experience assembling RMF security authorization packages and supporting artifacts.
• Knowledge of information systems security components and best practices including firewalls, encryption, and monitoring.
• Knowledge of U.S. Government security standards (NIST, ISO27001).
• Strong written and verbal communication and collaboration with security professionals.

Responsibilities

• Serve as ISSO under ISSM, ensuring compliance across classified systems aligned with DoD and DCSA.
• Execute RMF steps, maintain documentation, and support ATOs and continuous monitoring.
• Administer servers (Windows), patch management, auditing, and STIG hardening; support cross-domain data transfers.
• Provide on-site technical support and enforce least privilege access controls.
• Collaborate with program management, facilities, HR, IT, and security teams to deliver security artifacts.

Education

Associate’s degree in computer science or certification (MSCE or GAIC) or equivalent related experience

Tools

Splunk

Job description

Leonardo DRS is seeking an Information System Security Officer (ISSO) to safeguard on-site classified systems following RMF and DoD/DCSA standards. You will manage RMF artifacts, coordinate ATO packages via eMASS, and partner with ISSM, FSO, and security teams to ensure a resilient security posture.

The role requires hands-on security administration, vulnerability management, and strong communication skills to support mission objectives and maintain compliance across complex environments.