Junior ISSO - RMF & SCIF Security (DC On-Site)

Jimmy Jazz; Washington (District of Columbia); On-site; USD 80,000 - 110,000; Full time

Job summary

Tharros seeks a Junior Information System Security Officer (ISSO) to support the security posture across a portfolio of classified and unclassified systems in a Government SCIF in Washington, DC. You will maintain authorization artifacts, review logs, and track POA&Ms under ICD 503 and DHS 4300C.

The role requires a BS degree (or 4+ years IT/cybersecurity), 1 year RMF/security compliance experience, and active TS/SCI clearance. On-site in DC with strong documentation skills.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 4 years' IT/cybersecurity experience.
• Minimum 1 year of ISSO, RMF, or security compliance support experience.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS polygraph.
• Knowledge of RMF, NIST SP 800-37 and 800-53.
• Knowledge of hybrid classified/unclassified, on-premise and cloud environments.
• Familiarity with DevSecOps and agile methodologies.
• Experience securing Linux and Windows operating systems.
• POA&M tracking and audit log review experience.
• Ability to maintain accurate documentation across multiple systems.
• Proficiency in Microsoft Office,Teams or similar tools.
• Certifications such as CompTIA Security+ or CySA+ are desirable.
• Experience with RSA Archer, eMASS, or similar GRC tools.
• Exposure to Cross Domain Solutions.

Responsibilities

• Maintain security artifacts (SSP, POA&Ms, risk exceptions, contingency plans) in the GRC tool.
• Track POA&Ms on 30/60/90/120/180-day review intervals and provide reports.
• Perform weekly audit log reviews and respond to alerts.
• Ensure periodic vulnerability scans are conducted and reviewed.
• Submit IATT requests and notify ISSM, SCA, AO of changes to authorization.
• Support contingency plan tests and quarterly CPEM reporting.
• As SCIF ISCR, maintain hardware inventory and report SCI security incidents.

Skills

RMF knowledge

NIST SP 800-37

NIST SP 800-53

DevSecOps

Agile methodologies

Linux/Windows security

POA&M tracking

Audit log review

Documentation

Education

BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science

Tools

RSA Archer

eMASS

GRC tool

Job description

Tharros seeks a Junior Information System Security Officer (ISSO) to support the security posture across a portfolio of classified and unclassified systems in a Government SCIF in Washington, DC. You will maintain authorization artifacts, review logs, and track POA&Ms under ICD 503 and DHS 4300C.

The role requires a BS degree (or 4+ years IT/cybersecurity), 1 year RMF/security compliance experience, and active TS/SCI clearance. On-site in DC with strong documentation skills.