Junior ISSO — RMF/FISMA Security Specialist

Dunhill Professional Search & Government Solutions; Ashburn (VA); On-site; USD 120,000 - 144,000; Full time

Job summary

Dunhill Professional Search & Government Solutions in Ashburn, VA is seeking an Information Systems Security Officer (ISSO) to support federal programs and ensure compliance with FISMA and RMF for major applications and GSSs. The role is on-site, requiring US citizenship and ability to pass a federal background check.

The ISSO will lead security controls, prepare authorization packages, support audits, and guide risk remediation in accordance with NIST SP 800-37 Rev. 2 and agency policies.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent experience.
• Minimum 3 years of information security experience on programs of comparable scope and complexity.
• Solid knowledge of FISMA, NIST and the RMF methodology.
• Experience with security authorization processes (C&A and ATO) and related documentation.
• Strong understanding of security tools, hardware/software security implementation, and encryption techniques.
• Proven ability to analyze security vulnerabilities and develop remediation instructions.
• Excellent written and verbal communication skills for technical and executive audiences.
• Ability to work on site in Ashburn, VA (no telework).
• US Citizenship (no dual citizenship) and ability to pass a federal background investigation.

Responsibilities

• Serve as SME and point of contact for security requirements on FISMA systems.
• Prepare and maintain System Security Plans, Interconnection Security Agreements, Contingency Plans, POA&Ms, waivers and exceptions.
• Ensure systems are operated and disposed of per NIST RMF and agency policy.
• Conduct periodic security management activities and monthly audit log reviews.
• Document weaknesses as POA&Ms and track corrective actions.
• Support risk acceptance, waiver requests, and access reviews with justification.
• Investigate and report security incidents and coordinate remediation.
• Review PTAs and PIAs and provide security feedback to owners.
• Lead materials for assessment, authorization, audits and vulnerability reviews.
• Assist transition to and maintenance of an OA program for assigned systems.

Skills

RMF/NIST knowledge

FISMA compliance

Security authorization

Vulnerability analysis

Communication skills

On-site work

US Citizenship

Education

Bachelor's degree in Computer Science or related field

Tools

Security tools

Job description

Dunhill Professional Search & Government Solutions in Ashburn, VA is seeking an Information Systems Security Officer (ISSO) to support federal programs and ensure compliance with FISMA and RMF for major applications and GSSs. The role is on-site, requiring US citizenship and ability to pass a federal background check.

The ISSO will lead security controls, prepare authorization packages, support audits, and guide risk remediation in accordance with NIST SP 800-37 Rev. 2 and agency policies.