ISSO with TS/SCI: RMF Security Lead, Onsite DC

HRUCKUS; Washington (District of Columbia); On-site; USD 116,000 - 140,000; Full time

Job summary

HRUCKUS is seeking an Information Systems Security Officer (ISSO) TS SCI to support the DON SAP IT program at Joint Base Anacostia-Bolling in Washington, DC. The role monitors, assesses, and maintains RMF-compliant security controls to ensure systems meet requirements.

The ISSO collaborates with ISSE and engineering teams, conducts vulnerability assessments, supports authorization processes, and maintains security documentation while aligning with federal regulations and policies.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• 6 years of Cyber Security work experience, may replace a degree.
• ISSO experience in large IT programs.
• Experience with Scrum methodologies.
• Strong written and verbal communication.
• Analytical and problem-solving abilities.
• Teamwork and collaboration.
• Organizational and multitasking skills.
• Proficiency with Nessus, Splunk, STIGS, and SCAP tools.
• DoD 8570.1-M IAT Level II certification (e.g., Security+ CE, CAP).

Responsibilities

• Develop and maintain RMF documentation and artifacts.
• Assess and integrate security controls with ISSE and engineering teams.
• Monitor security posture and ensure compliance with standards.
• Conduct security assessments and audits and recommend mitigations.
• Review and maintain security-related documentation and policies.
• Support security authorization and accreditation processes.

Skills

Top Secret clearance

Cyber Security

Scrum

Communication skills

Analytical thinking

Teamwork

Multitasking

DoD 8570.1-M IAT II

Tools

Nessus (ACAS)

Splunk

STIGS

SCAP tools

Job description

HRUCKUS is seeking an Information Systems Security Officer (ISSO) TS SCI to support the DON SAP IT program at Joint Base Anacostia-Bolling in Washington, DC. The role monitors, assesses, and maintains RMF-compliant security controls to ensure systems meet requirements.

The ISSO collaborates with ISSE and engineering teams, conducts vulnerability assessments, supports authorization processes, and maintains security documentation while aligning with federal regulations and policies.