ISSO for Missile Defense RMF Systems – On Site

Vanguard Defense Solutions; Colorado Springs (CO); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

401(k) plan with Safe Harbor employer

Paid time off 120 hours per year + 11‑

Long-term disability

Job summary

Vanguard Defense Solutions in Colorado Springs, CO seeks a Cyber Security Engineer to support the Missile Defense Agency under the AIMSS program, serving as an Information System Security Officer (ISSO) for MDA enclaves and systems and owning RMF packages and continuous monitoring.

The role requires implementing RMF per NIST guidelines, developing System Security Plans, and performing vulnerability analyses. On-site work at a government facility is required.

Qualifications

• Must hold DoD 8570.01-M / 8140 IAM Level II baseline certification (e.g., Security+ CE)
• Experience implementing RMF and interpreting NIST SP 800-53 Rev 5 controls
• Background in Windows, Linux server administration or similar environments

Responsibilities

• Serve as ISSO for MDA enclaves and systems
• Implement RMF per NIST SP 800-37; assess controls per NIST SP 800-53 Rev 5
• Develop and maintain System Security Plans and ROE/POA&Ms in eMASS
• Track POA&Ms and remediation milestones
• Conduct vulnerability scanning (ACAS/Nessus) and drive STIG compliance
• Prepare waivers or risk exceptions when remediations are not possible
• Maintain continuous monitoring and brief cybersecurity posture to stakeholders
• Ensure compliance with FISMA, NIST, DoD, and MDA policies

Skills

ISSO duties

RMF implementation

NIST RMF framework

Vulnerability assessment

ACAS/Nessus

eMASS

Patching & STIGs

Education

DoD 8570.01-M / 8140 IAM Level II baseline certification

Tools

ACAS

eMASS

Tanium

Trellix

STIG Viewer

Windows Admin

Linux Admin

Job description

Vanguard Defense Solutions in Colorado Springs, CO seeks a Cyber Security Engineer to support the Missile Defense Agency under the AIMSS program, serving as an Information System Security Officer (ISSO) for MDA enclaves and systems and owning RMF packages and continuous monitoring.

The role requires implementing RMF per NIST guidelines, developing System Security Plans, and performing vulnerability analyses. On-site work at a government facility is required.