Lead Cybersecurity Engineer/ISSO

DSA; Morgantown (WV); On-site; USD 120,000 - 150,000; Full time

Job summary

DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role aims to reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. The position requires DoD/federal experience and an active Secret clearance.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
• At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
• Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
• Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
• Active Secret-level clearance.

Responsibilities

• Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.
• Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
• Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
• Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
• Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
• Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.

Skills

RMF lifecycle experience

DoD/federal systems experience

Security coordination with ISSM/AO

Zero Trust implementation

Education

Bachelor's degree in cybersecurity, computer science, information systems, engineering, or related field

Tools

ACAS

SCAP

POA&M management

eMASS artifacts

STIGs / IAVM

AWS security services

SIEM integration

Job description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Summary

DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment. This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support.

Key Responsibilities

• Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.
• Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
• Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
• Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
• Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
• Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.

Required Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
• At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
• Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
• Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
• Active Secret-level clearance.

Desired Qualifications And Certifications

• CISSP or equivalent strongly preferred.
• Experience supporting biometric, identity intelligence, watchlist, or high-availability mission systems.

Status: Pending award; this position is contingent upon contract award, customer approval, funding availability, and completion of applicable DSA recruiting, security, and onboarding requirements.

#DSA209

The posted salary range is a good‑faith estimate. Actual compensation will be based on the selected candidate’s qualifications, experience, skills, and other job‑related factors.

DSA - Salary Pay Range

$120,000 - $150,000 USD

Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information.

DSA is proud to be an Equal Opportunity Employer.

DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

DSA requires background checks, where permitted, by law.

DSA is an E-Verify Employer.