ISSO: Lead RMF, ConMon & Multi-Enclave Security

Omniscius; Oakton (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Omniscius in Oakton, VA is seeking an Information System Security Officer (ISSO) to ensure secure operation of complex multi-enclave IT and R&D systems. The ISSO serves as the principal advisor to system owners on security posture and supports continuous monitoring without disrupting critical research.

This hands-on governance role relies on RMF, ACAS/Tenable.sc, Nessus, and DoD tooling to maintain ATO statuses, validate compliance, and coordinate remediation with administrators and

Responsibilities

• RMF Lifecycle Management: Develop, maintain, and oversee RMF authorization packages (SSP, SAR, RAR, SAP, and POA&M) within systems of record (e.g., eMASS, Xacta).
• ACAS Operations & Vulnerability Management: Execute credentialed and non-credentialed ACAS scans; analyze results to identify vulnerabilities and validate compliance.
• POA&M & Remediation Advisory: Translate scan results into actionable mitigation and coordinate with admins and researchers to remediate.
• Continuous Monitoring (ConMon): Implement and oversee ConMon strategies; review dashboards, logs, and configurations for NIST 800-53 controls.
• Air-Gapped & Multi-Enclave Support: Facilitate secure data transfers and validation for isolated enclaves.
• Security Assessments: Conduct routine checks and support third-party assessments and ATO control validations.
• Incident Handling: Coordinate with ISSM and response teams to investigate anomalies and potential data spillages.

Skills

RMF Lifecycle Management

ACAS Operations

Vulnerability Management

ConMon

Air-Gapped Enclave Support

Security Assessments

Incident Response

Tools

eMASS

Xacta

Nessus/Tenable.sc

Splunk

Elastic

STIG Viewer

Evaluate-STIG

Job description

Omniscius in Oakton, VA is seeking an Information System Security Officer (ISSO) to ensure secure operation of complex multi-enclave IT and R&D systems. The ISSO serves as the principal advisor to system owners on security posture and supports continuous monitoring without disrupting critical research.

This hands-on governance role relies on RMF, ACAS/Tenable.sc, Nessus, and DoD tooling to maintain ATO statuses, validate compliance, and coordinate remediation with administrators and