ISSO: RMF Lead for Classified Systems

Socket.dev; Reston (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

Paid Time Off

401(k) Options

Tuition Reimbursement

Professional Development Reimbursement

Gym and Fitness Reimbursement

Employee Assistance Program

Annual Salary Reviews

Job summary

Metron seeks a capable Information Systems Security Officer (ISSO) to own the cybersecurity posture and authorization lifecycle of multiple classified and unclassified information systems in Reston, VA. You will work closely with the ISSM, CISO, system administrators, program leadership, and government customers to manage day-to-day security operations and maintain readiness.

This mid-level role requires a solid RMF foundation and hands-on experience with RMF artifacts, A&A processes, and

Qualifications

• Active Top Secret clearance and current SSBI or Tier 5 investigation.
• 3+ years in cybersecurity, system administration, or information assurance for DoD RMF.
• Hands-on RMF artifacts: SSPs, SCTMs, POA&Ms, eMASS.
• Active DoD 8140 IAM Level II certification or higher (e.g., CASP+, CAP, CISM, CISSP).
• Knowledge of NIST SP 800-53 controls in classified environments.
• Experience with continuous monitoring or vulnerability management across enclaves.

Responsibilities

• Manage A&A lifecycle for assigned systems following RMF, JSIG, NIST 800-53, DoD policy.
• Develop and maintain SSPs, SCTMs, STIG packages, POA&Ms, risk assessments, and eMASS records.
• Evaluate changes for cybersecurity and authorization impact; prepare for reviews and inspections.
• Execute ConMon and vulnerability management; track findings to closure.
• Review configuration, audit, access, and evidence against baselines and STIGs; drive POA&M actions.
• Manage user and privileged access; enforce removable media and data handling rules.
• Support COMSEC accountability, incident investigations, and SIPRNet operations.
• Serve as main cybersecurity contact with program managers, vendors, and government representatives.

Skills

RMF knowledge

A&A lifecycle

Security operations

Policy enforcement

Education

Bachelor’s degree (CS/Cybersecurity)

Tools

Windows Server

eMASS

STIGs

Job description

Metron seeks a capable Information Systems Security Officer (ISSO) to own the cybersecurity posture and authorization lifecycle of multiple classified and unclassified information systems in Reston, VA. You will work closely with the ISSM, CISO, system administrators, program leadership, and government customers to manage day-to-day security operations and maintain readiness.

This mid-level role requires a solid RMF foundation and hands-on experience with RMF artifacts, A&A processes, and