ISSO: RMF Expert for InfoSec & Incident Response

Peraton; Washington (District of Columbia); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton seeks an Information System Security Officer to support our customer onsite in Washington, D.C. The role focuses on RMF, JSIG, and continuous monitoring across multiple environments.

You will assist the ISSM, manage security artifacts, conduct ATO related activities, and coordinate vulnerability management plus incident response. Strong communication and security posture improvements are essential.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• 5 years with BS/BA; 3 years with MS/MA; 4 years additional relevant experience may be considered in lieu of BS degree.
• Security+ or equivalent certification (DoD 8570 IAM Level II).
• Experience with SAP assessments and authorizations.
• 3+ years experience with Authority to Operate (ATO) process, continuous monitoring, POA&Ms, Security Authorizations (SA), NIST 800-37, NIST 800-53 Rev4/ Rev5.
• Experience with SCAP, STIGs, and other compliance tools.
• Proven written and verbal communication skills, and the ability to work well with team members.
• Active TS clearance with ability to obtain SCI.

Responsibilities

• Assist the Information System Security Manager (ISSM) with information assurance efforts across environments.
• Perform ISSO roles and responsibilities as prescribed by JSIG and other regulations.
• Execute and maintain RMF activities: control implementation oversight, evidence collection, assessment support, POA&M management, continuous monitoring.
• Maintain security artifacts: SSP, control narratives, diagrams, inheritance/leverage controls, CM plan, incident handling, contingency artifacts.
• Operate continuous monitoring: vulnerability management, config compliance, patching coordination, scan triage, risk acceptance, remediation verification.
• Review and approve security-relevant changes through configuration/change control and validate security configurations after upgrades.
• Support incident response and reporting: investigations, containment actions, preserve evidence, post-incident lessons learned.
• Ensure least privilege/access governance: account management, privileged workflows, access reviews, audit compliance.
• Translate security requirements into implementable guidance for engineering teams.

Skills

Top Secret clearance

Security+ certification

SAP assessments

ATO process

SCAP/STIGs

Written communication

Verbal communication

TS clearance

Education

BS/BA

MS/MA

Tools

Splunk

ACAS

Nessus

Vulnerability scanners

Job description

Peraton seeks an Information System Security Officer to support our customer onsite in Washington, D.C. The role focuses on RMF, JSIG, and continuous monitoring across multiple environments.

You will assist the ISSM, manage security artifacts, conduct ATO related activities, and coordinate vulnerability management plus incident response. Strong communication and security posture improvements are essential.