ISSO | Federal RMF & ATO Security Lead

Socket.dev; Hanover (MD); Hybrid; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is seeking an experienced Information System Security Officer (ISSO) to support a mission-critical federal program. This role focuses on cybersecurity, RMF, ATO, and ensuring security across enterprise information systems in collaboration with system owners and ISSMs.

The ISSO will develop SSPs and related artifacts, coordinate RMF activities, assess security posture, and guide government stakeholders on risk-based improvements. A Secret clearance is required and the work is hybrid.

Qualifications

• Active Secret clearance required.
• 5+ years of cybersecurity, RMF, or information system security experience.
• Experience as ISSO/ISSM support resource in a federal environment.
• Strong knowledge of NIST SP 800-53, 800-37, FISMA.

Responsibilities

• Provide security advisory support to System Owners, ISSMs, and program leadership on information system security.
• Support implementation and continuous improvement of security controls.
• Coordinate RMF activities including system categorization, control implementation, security assessments, and authorization activities.
• Develop, review, and maintain SSPs, POA&Ms, Security Assessment Plans, and related documentation.
• Assess security posture and recommend corrective actions to address risks and compliance deficiencies.
• Conduct security reviews and assessments to validate control effectiveness.
• Collaborate with engineers and government stakeholders to embed security throughout the system lifecycle.
• Support Authorization to Operate (ATO) activities and ongoing authorization maintenance.
• Execute vulnerability management activities including identification, remediation tracking, risk assessment, and corrective actions.
• Review access control implementations, privileged accounts, hardware/software inventories, and configurations.
• Develop security reports and dashboards for leadership.
• Support audits and compliance reviews conducted by internal and external entities.

Skills

Active Secret clearance

RMF experience

ATO processes

SSP/POA&M documentation

NIST 800-53/800-37 knowledge

Security controls implementation

Vulnerability management

Audits & compliance

Written & verbal communication

Independent multitasking

Education

Bachelor's degree in Cybersecurity/IT/CS or related field

Tools

Tenable Nessus

Security Center

SIEM platforms

EDR solutions

Job description

SMX is seeking an experienced Information System Security Officer (ISSO) to support a mission-critical federal program. This role focuses on cybersecurity, RMF, ATO, and ensuring security across enterprise information systems in collaboration with system owners and ISSMs.

The ISSO will develop SSPs and related artifacts, coordinate RMF activities, assess security posture, and guide government stakeholders on risk-based improvements. A Secret clearance is required and the work is hybrid.