ISSO: RMF & AWS IL5 Security Lead – Hybrid (Fairfax)

ECS; Fairfax (VA); Hybrid; USD 140,000 - 160,000; Full time

Job summary

Everforth ECS seeks an experienced Information System Security Officer (ISSO) in a hybrid role at our Fairfax, VA office. You will support RMF activities for the AWS IL5 environment and coordinate with the government cybersecurity team to prepare IATT and ATO packages.

The ideal candidate brings DoW experience, RMF expertise, and hands-on practice with ACAS/Nessus, eMASS, and STIGs. You will work with engineers to validate findings and maintain authorization documentation for cloud and

Qualifications

• Active DoD 8140 IAT Level II Security+ (or higher).
• Minimum 5 years of relevant cybersecurity experience, including DoW RMF, security authorization, or continuous monitoring.
• Hands-on experience with RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring.
• Experience with AWS DoD environments and cloud security concepts.
• Ability to develop and maintain cybersecurity documentation (SSPs, POA&Ms, policies, SOPs).
• Strong analytical, writing, and communication skills for stakeholders.

Responsibilities

• Support RMF activities for the AWS IL5 environment through SDLC, IATT, ATO, and continuous monitoring.
• Develop and maintain authorization artifacts, security plans, evidence, diagrams, and SOPs.
• Maintain eMASS records, including control details, artifacts, assessments, and POA&Ms.
• Develop, track, and close POA&Ms for vulnerabilities, STIG findings, and control deficiencies.
• Review DISA STIG artifacts and supporting evidence, including scans and remediation.
• Perform vulnerability analysis using ACAS/Nessus and validate scan results.
• Evaluate DTOs, CVEs, and directives to assess exposure and adjust ACAS scans.
• Collaborate with engineers to validate findings and track remediation.

Skills

U.S. Citizen

Secret clearance

IAT Level II Security+

RMF

NIST 800-53

ACAS/Nessus

eMASS

DISA STIGs

DTOs/ CVEs analysis

AWS DoD cloud

Kubernetes

Linux/Windows

Identity/Access management

Tools

ACAS/Nessus

eMASS

DISA STIGs

NIST SP 800-53

Job description

Everforth ECS seeks an experienced Information System Security Officer (ISSO) in a hybrid role at our Fairfax, VA office. You will support RMF activities for the AWS IL5 environment and coordinate with the government cybersecurity team to prepare IATT and ATO packages.

The ideal candidate brings DoW experience, RMF expertise, and hands-on practice with ACAS/Nessus, eMASS, and STIGs. You will work with engineers to validate findings and maintain authorization documentation for cloud and