Junior ISSO – RMF & Cloud Security (NVC)

ANALYGENCE; Washington (District of Columbia); On-site; USD 65,000 - 90,000; Full time

Job summary

Tharros, supporting DHS with cybersecurity services across its Intelligence Enterprise, has an immediate opening for a Junior Information System Security Officer, National Vetting Center, on-site in a Government SCIF in Washington, DC.

You will assist the senior NVC ISSO to maintain authorization artifacts, track POA&Ms, review audit logs, and support assessment and cloud security activities for NVC systems.

Qualifications

• BS degree in IT, Cybersecurity, IS, or CS or 4+ years IT/cybersecurity experience.
• Minimum 1 year in ISSO, RMF, or security compliance support.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS polygraph.
• Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Knowledge of hybrid classified/unclassified, on-premise and cloud environments.
• Knowledge of DevSecOps and Agile methodologies.
• Skill in securing Linux and Windows operating systems.
• POA&M tracking and audit log review.

Responsibilities

• Maintain security artifacts (SSP, POA&Ms, risk exceptions) for NVC systems.
• Track POA&Ms on 30/60/90/120/180-day review intervals and provide reports.
• Perform audit log reviews at least weekly and respond to alerts.
• Ensure periodic vulnerability scans are performed and review results.
• Support security control assessments and cloud security engineering for NVC systems.
• Submit IATT requests and notify stakeholders of changes affecting authorization.
• Serve as SCIF Information Security Compliance Representative for assigned spaces.

Skills

RMF knowledge

NIST SP 800-37

NIST SP 800-53

DevSecOps

Agile methodologies

Linux security

Windows security

POA&M tracking

Audit log review

Documentation

MS Office

Education

B.S. in Information Technology / Cybersecurity / Information Systems / Computer Science

4+ years IT or cybersecurity experience

Tools

RSA Archer

eMASS

Job description

Tharros, supporting DHS with cybersecurity services across its Intelligence Enterprise, has an immediate opening for a Junior Information System Security Officer, National Vetting Center, on-site in a Government SCIF in Washington, DC.

You will assist the senior NVC ISSO to maintain authorization artifacts, track POA&Ms, review audit logs, and support assessment and cloud security activities for NVC systems.