ISSO: RMF & DoD Security Expert (TS/SCI)

JFL CONSULTING, LLC; Omaha (NE); On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Health premiums

FSA options

Life insurance

Disability coverage

401(k) plan

Generous PTO

Certification reimbursement

Professional development

Online learning access

Job summary

JFL Consulting, LLC is seeking an Information System Security Officer (ISSO) to support cybersecurity, RMF, and system authorization activities across secure government environments. This role focuses on maintaining security posture, supporting ATO and continuous monitoring, and ensuring compliance with DoD cybersecurity requirements.

Candidates should have hands‑on RMF processes, security documentation, vulnerability management, and remediation.

Qualifications

• Active TS/SCI clearance required.
• 3–8+ years in information security/cybersecurity/IT.
• Hands-on RMF, ATO, and ConMon experience.
• Experience with vulnerability management, scanning, STIG implementation, and remediation.
• Strong ability to develop and maintain security documentation and reports.

Responsibilities

• Support RMF & ATO activities with ISSMs/ISSOs.
• Maintain security posture across system lifecycles.
• Develop/maintain SSPs, POA&Ms, SCTMs.
• Coordinate remediation with ISSMs and engineers.
• Ensure compliance with NIST SP 800-53 Rev.5 and DoD requirements.

Skills

RMF processes

Vulnerability management

Security documentation

Authorization to Operate

ConMon

NIST RMF/800-53

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Xacta

Nessus Pro

ACAS

SCAP

EvaluateSTIG

Job description

JFL Consulting, LLC is seeking an Information System Security Officer (ISSO) to support cybersecurity, RMF, and system authorization activities across secure government environments. This role focuses on maintaining security posture, supporting ATO and continuous monitoring, and ensuring compliance with DoD cybersecurity requirements.

Candidates should have hands‑on RMF processes, security documentation, vulnerability management, and remediation.