ISSO: DoD RMF & Vulnerability Management Lead

Venesco,-LLC-; Maryland; On-site; USD 90,000 - 130,000; Full time

Job summary

Venesco, LLC is seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role maintains RMF documentation, supports continuous monitoring, tracks vulnerabilities, manages POA&Ms, and helps ensure systems comply with DoD and NIST requirements.

Location is onsite 3-5 days a week. Responsibilities include updating SSP, supporting monitoring activities, creating POA&Ms, analyzing vulnerability scans, maintaining

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• Typically, 2–4 years of cybersecurity or information assurance experience.
• Active Secret clearance.
• Relevant DoD 8140 certifications strongly preferred.
• Working knowledge of NIST SP 800-53 and DoD cybersecurity processes.
• Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection.
• Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related tools.
• Strong documentation, analytical, and issue-tracking skills.
• Ability to work with technical and non-technical stakeholders.

Responsibilities

• Maintain and update the System Security Plan (SSP) and RMF artifacts.
• Support continuous monitoring activities, including log review and control checks.
• Create, update, and track POA&Ms for weaknesses and remediation actions.
• Analyze vulnerability scan results and validate DISA STIG findings.
• Maintain system records in eMASS and support package updates.
• Coordinate incident response activities for assigned systems.
• Collaborate with system owners, admins, and engineers to resolve security issues.

Skills

Documentation

Analytical skills

Issue tracking

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

ACAS/Tenable

STIG Viewer

Job description

Venesco, LLC is seeking an Information System Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems. This role maintains RMF documentation, supports continuous monitoring, tracks vulnerabilities, manages POA&Ms, and helps ensure systems comply with DoD and NIST requirements.

Location is onsite 3-5 days a week. Responsibilities include updating SSP, supporting monitoring activities, creating POA&Ms, analyzing vulnerability scans, maintaining