ISSO & RMF Lead for DHS Intelligence (On-Site SCIF)

ANALYGENCE; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Tharros in Washington, DC, is seeking an Information System Security Officer (ISSO) to own the security posture of DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted systems, in accordance with ICD 503 and DHS 4300C. The role is on-site in a Government SCIF.

Responsibilities include maintaining ATOs, performing RMF assessments, managing POA&Ms, weekly audit reviews, and mentoring junior ISSOs. Requires TS/SCI, U.S. citizenship, and strong RMF knowledge.

Qualifications

• BS degree in IT, Cybersecurity, Information Systems, or CS, or 6+ years in IT/cybersecurity.
• Minimum 3 years' experience as an ISSO or RMF package owner.
• Active TS/SCI clearance and U.S. citizenship; DHS polygraph required.
• Strong knowledge of RMF, NIST SP 800-37/53, and ICD 503.
• Experience with Cross Domain Solution engineering and governance.
• Experience with hybrid or cloud environments; DevSecOps and Agile.

Responsibilities

• Create and maintain ATO packages in the GRC tool and monitor compliance.
• Perform self-assessments of on-premise and cloud systems against the A&A SOP.
• Manage POA&Ms, waivers, risk exceptions; provide regular reports.
• Perform audit log reviews weekly, respond to NOSC alerts, ensure periodic scanning.
• Coordinate changes via IATT requests and join CM B when designated.
• Facilitate annual contingency plan tests and submit CPEM reports.
• Deliver ISSO reports to ISSMs and system owners.
• Serve as SCIF ISCR and mentor junior ISSOs.

Skills

RMF

NIST SP 800-37

NIST SP 800-53

Cross Domain

Cloud security

DevSecOps

Agile

Communication

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

RSA Archer

eMASS

Job description

Tharros in Washington, DC, is seeking an Information System Security Officer (ISSO) to own the security posture of DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted systems, in accordance with ICD 503 and DHS 4300C. The role is on-site in a Government SCIF.

Responsibilities include maintaining ATOs, performing RMF assessments, managing POA&Ms, weekly audit reviews, and mentoring junior ISSOs. Requires TS/SCI, U.S. citizenship, and strong RMF knowledge.