ISSO: RMF/A&A Security Lead for Government Programs

Socket.dev; Herndon (VA); On-site; USD 102,000 - 178,000; Full time

Job summary

Amazon Security in Herndon, VA is seeking an Information System Security Officer (ISSO) to assess, authorize, and continuously defend information systems supporting a high-priority U.S. Government program.

You will develop, maintain, and continually improve the System Security Plan (SSP), security control evidence, and the body of evidence for authorization, while coordinating RMF activities with ISSM and government counterparts to sustain the system's posture.

Qualifications

• 3+ years of RMF/A&A or ISSO experience.
• Working knowledge of NIST 800-53, RMF, and SSP development.
• Working knowledge of Service Now to apply the RMF
• Experience producing authorization artifacts and evidence.
• Current, active US Government Security Clearance of TS/SCI with Polygraph

Responsibilities

• Develop, maintain, and continuously improve the System Security Plan (SSP) and all supporting authorization documentation.
• Prepare and maintain security control implementation evidence and the body of evidence required for system authorization.
• Coordinate and support security control assessments.
• Manage Plans of Action & Milestones (POA&Ms) from identification through closure, ensuring timely remediation of findings.
• Execute continuous monitoring activities in accordance with the NIST RMF and organizational policies.
• Partner with platform build and engineering teams to ensure security controls are properly implemented, configured, and documented.
• Collaborate with the ISSM and U.S. Government counterparts throughout the full RMF lifecycle.
• Proactively identify security gaps and vulnerabilities, recommend remediation strategies, and track resolution to completion.
• Support audit readiness and respond to ad hoc security inquiries from government stakeholders.
• Contribute to the development and refinement of security processes, templates, and automation to improve A&A efficiency.

Skills

RMF/A&A experience

SSP development

Authorization artifacts

Coordinating security assessments

Clearance TS/SCI with Polygraph

Tools

ServiceNow RMF tooling

RMF tooling

Job description

Amazon Security in Herndon, VA is seeking an Information System Security Officer (ISSO) to assess, authorize, and continuously defend information systems supporting a high-priority U.S. Government program.

You will develop, maintain, and continually improve the System Security Plan (SSP), security control evidence, and the body of evidence for authorization, while coordinating RMF activities with ISSM and government counterparts to sustain the system's posture.