ISSO – RMF/ATO Specialist (Oahu, HI)

Po'okela; Honolulu (HI); On-site; USD 119,000 - 161,000; Full time

Benefits offered by this job

401K with company match

Medical insurance

Dental insurance

Disability insurance

Life insurance

Tuition reimbursement

Paid time off

11 paid holidays

Job summary

Bering-Alaka`ina Holdings, LLC is seeking an experienced Information System Security Officer (ISSO) to strengthen the cybersecurity posture and RMF across mission-critical systems on Oahu, Hawai`i. The role collaborates with ISSMs, system owners, and authorizing officials to ensure continuous NIST RMF compliance.

Responsibilities include leading RMF lifecycle steps, validating NIST SP 800-53 controls, analyzing scans (ACAS/Nessus, SCAP, STIG), and maintaining SSPs, POA&Ms, and related plans.

Qualifications

• 4+ years of direct experience executing A&A workflows to achieve ATO.
• Experience interpreting DISA STIGs, SCAP, and ACAS vulnerability scans.
• Experience validating host-level security baselines on Linux, Windows, and cloud enclaves (AWS/Azure Gov).
• Proficiency with governance tools for tracking compliance (eMASS, Xacta, Archer, Jira).
• Experience establishing continuous monitoring using SIEM tools such as Splunk or Elastic Security.

Responsibilities

• Oversee the RMF lifecycle from Step 1 to 6 with thorough documentation in eMASS or Xacta.
• Validate NIST SP 800-53 controls, identify deficiencies, and plan remediation.
• Review automated vulnerability scans and verify mitigation effectiveness.
• Maintain POA&M entries for rapid closure of vulnerabilities and findings.
• Author and maintain SSPs, Contingency, Incident Response, Continuous Monitoring, and Configuration Management Plans.
• Participate in CCBs to assess security impacts of changes.
• Assist with incident investigations and audit log reviews to ensure integrity.
• Other duties as assigned by Supervisor.

Skills

A&A workflows

RMF lifecycle

NIST SP 800-53

CCB participation

Risk metrics

SCRM familiarity

Executive briefing

Education

Bachelor's Degree in Cybersecurity / Information Systems / Computer Science

DoD 8140 / 8570 IAM Level II/III certs

NIST RMF/CNSSI training

Tools

eMASS

Xacta

Archer

Jira

Splunk

Elastic Security

Job description

Bering-Alaka`ina Holdings, LLC is seeking an experienced Information System Security Officer (ISSO) to strengthen the cybersecurity posture and RMF across mission-critical systems on Oahu, Hawai`i. The role collaborates with ISSMs, system owners, and authorizing officials to ensure continuous NIST RMF compliance.

Responsibilities include leading RMF lifecycle steps, validating NIST SP 800-53 controls, analyzing scans (ACAS/Nessus, SCAP, STIG), and maintaining SSPs, POA&Ms, and related plans.