ISSO: DoD RMF & STIGs Security Lead

Digital Prospectors; Lexington (MA); On-site; USD 110,000 - 150,000; Full time

Job summary

Digital Prospectors in Lexington, MA is seeking an ISSO to develop and maintain information systems security programs across Linux, Windows, Unix, Solaris, and virtualized environments.

The role supports RMF compliance, SSPs, and continuous monitoring, including vulnerability scans, incident response, and configuration management. A Secret clearance and DoD experience are required, with strong communication skills and focus on security governance.

Qualifications

• Active Secret clearance required.
• Minimum of 3 years IT security experience in a DoD environment.
• At least 5 years of experience securing Windows, Linux, Unix, Solaris, and virtualized environments.
• Experience with DISA STIGs and SRGs.
• Knowledge of RMF, NISPOM, DAAPM.
• Experience with vulnerability scanning and auditing tools.

Responsibilities

• Develop and maintain RMF-based security artifacts and SSPs.
• Secure classification boundaries across multi-OS environments.
• Monitor vulnerabilities, incidents, and configuration changes.
• Support security assessments, tests, and authorization processes.
• Ensure audit records are collected and protected.

Skills

Active Secret clearance

DoD IT security experience

5+ years securing Windows/Linux/Unix/S

RMF knowledge

DISA STIGs/SRGs experience

Vulnerability scanning

Communication skills

Security+ certification aspiration

Tools

ACAS

Nessus

Splunk

OpenRMF

McAfee ePO

Job description

Digital Prospectors in Lexington, MA is seeking an ISSO to develop and maintain information systems security programs across Linux, Windows, Unix, Solaris, and virtualized environments.

The role supports RMF compliance, SSPs, and continuous monitoring, including vulnerability scans, incident response, and configuration management. A Secret clearance and DoD experience are required, with strong communication skills and focus on security governance.