Junior ISSO: RMF & Security Compliance in Government SCIF

ANALYGENCE; Washington (District of Columbia); On-site; USD 70,000 - 100,000; Full time

Job summary

Tharros is seeking a Junior Information System Security Officer (ISSO) to support DHS cybersecurity within a SCIF in Washington, DC. You will work with senior ISSOs to maintain RMF artifacts, review logs, and track POA&Ms across a portfolio of systems.

The role requires a TS/SCI clearance, U.S. citizenship, and knowledge of RMF, NIST SP 800-37/53, with exposure to hybrid on-premise and cloud environments. On-site in a Government SCIF.

Qualifications

• BS degree or 4+ years IT/cybersecurity experience.
• 1+ year ISSO/RMF/security compliance experience.
• Active TS/SCI clearance and US citizenship; willing to undergo a polygraph.
• Knowledge of RMF, NIST SP 800-37/53.
• Hybrid classified/unclassified, on-premise and cloud environments.

Responsibilities

• Maintain security artifacts (SSP, POA&Ms, risk exceptions, contingency plans, privileged user guides, PTAs) in the GRC tool.
• Track POA&Ms on 30/60/90/120/180-day intervals and provide regular reports.
• Perform audit log reviews weekly and respond to alerts.
• Ensure periodic vulnerability scans are performed and review results.
• Submit IATT requests and notify changes affecting authorization.
• Support contingency plan tests and quarterly CPEM reporting.
• As SCIF ISCR, maintain hardware inventory and report SCI incidents.

Skills

RMF knowledge

NIST SP 800-37/53 knowledge

Hybrid on-premise/cloud environments

DevSecOps knowledge

Cybersecurity communications

Linux/Windows security

POA&M tracking

Audit log review

MS Office proficiency (Teams)

TS/SCI clearance & US citizenship

Education

BS degree in IT/Cybersecurity/IS/CS

Tools

RSA Archer

eMASS

Job description

Tharros is seeking a Junior Information System Security Officer (ISSO) to support DHS cybersecurity within a SCIF in Washington, DC. You will work with senior ISSOs to maintain RMF artifacts, review logs, and track POA&Ms across a portfolio of systems.

The role requires a TS/SCI clearance, U.S. citizenship, and knowledge of RMF, NIST SP 800-37/53, with exposure to hybrid on-premise and cloud environments. On-site in a Government SCIF.