ISSO – Federal Security, RMF & NIST Expert

Saliense-Consulting-LL; Arlington (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

PTO & Sick Time

Health insurance

401(k) match

Parental leave

Professional development

Job summary

Saliense is seeking an Information System Security Officer (ISSO) to support work under federal contracts. The role requires deep knowledge of RMF, NIST CSF, and federal security policies, with responsibilities spanning vulnerability and risk assessments, security evaluations, and implementation of protective measures.

The ISSO will interact with developers, engineers, and managers to ensure confidentiality, integrity, and availability of sensitive information, and will contribute to security

Qualifications

• BS/BA in Computer Science, Information Systems, Engineering, Business, Physical Science, or other technology-related discipline.
• 3+ years of relevant experience.
• Experience with RMF and applying the NIST Cybersecurity Framework.
• Substantial knowledge of federal information system security policy, industry best practices, security control assessments, POA&M management, system authorizations, configuration management, and system analysis.
• Experience designing and implementing solutions for protecting confidentiality, integrity, and availability of sensitive information; technical expert in vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Experience using JCAM.
• Strong understanding of NIST SP 800-53, SP 800-171, SP 800-37; FISMA audit requirements.
• Knowledge of IT audit requirements.
• Ability to work with developers, engineers, and managers on system teams.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Knowledge of risk management processes and tools.
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy in a federal environment.
• Knowledge of current and past cybersecurity threats and vulnerabilities.

Responsibilities

• Serves as a recognized information security expert in vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• From a technical perspective, designs and implements solutions to protect confidentiality, integrity, and availability of sensitive information.
• Provides technical evaluations of customer systems and assists with security improvements.
• Participates in the design of business impact analyses, system categorization, contingency plans, privacy documents, and other system security documentation to maintain protection and minimize operational impact.
• Conducts testing and audit log reviews to evaluate effectiveness of current security measures.
• Conducts security product evaluations and recommends products, technologies, and upgrades to improve the customer’s security posture.

Skills

Vulnerability assessment

Risk assessment

Network security

Security implementation

Security product evaluation

IT audit

RMF

NIST CSF

Education

BS/BA in CS/IS/Engineering/Related

Tools

RMF

NIST SP 800-53/800-171/800-37

JCAM

Job description

Saliense is seeking an Information System Security Officer (ISSO) to support work under federal contracts. The role requires deep knowledge of RMF, NIST CSF, and federal security policies, with responsibilities spanning vulnerability and risk assessments, security evaluations, and implementation of protective measures.

The ISSO will interact with developers, engineers, and managers to ensure confidentiality, integrity, and availability of sensitive information, and will contribute to security