Lead Cybersecurity Engineer/ISSO

DSA Inc.; Morgantown (WV); On-site; USD 120,000 - 150,000; Full time

Job summary

DSA Inc. in Morgantown, WV seeks a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. DSA Inc.

Qualifications

• 8+ years of cybersecurity, ISSO, RMF, or security engineering experience.
• Experience with DoDI 8500.01/8510.01, NIST SP 800-37/53, STIGs, IAVMs, ACAS, SCAP, POA&M, and eMASS.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, and DevSecOps.
• Strong coordination with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management.
• Active Secret clearance.

Responsibilities

• Lead cybersecurity engineering and ISSO activities for RMF lifecycle and ATO sustainment.
• Maintain RMF artifacts, security plans, POA&Ms, scan results, waivers, and eMASS-ready docs.
• Coordinate vulnerability remediation using ACAS, SCAP, STIGs, IAVMs, and container scans.
• Support continuous monitoring, cybersecurity reporting, and audit readiness.
• Integrate cyber review into change control, release planning, cloud ops, and DevSecOps.
• Support Zero Trust implementation across identity, device, network, app, data, automation, visibility.

Skills

Cybersecurity

ISSO experience

RMF process

Zero Trust

Cloud security

Stakeholder coordination

Clearance

Education

Bachelor's degree or higher in cybersecurity, CS, or related

Tools

ACAS

SCAP

STIG

IAVM

eMASS

POA&M management

AWS security services

Job description

All hired employees are expected to have experience with Microsoft Copilot and / or an approved equivalent AI solution.

Summary: DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment. This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support.

Key Responsibilities:

• Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.
• Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
• Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
• Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
• Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
• Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.

Required Qualifications:

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
• At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
• Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
• Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
• Active Secret-level clearance.

Desired Qualifications and Certifications:

• CISSP or equivalent strongly preferred.
• Experience supporting biometric, identity intelligence, watchlist, or high-availability mission systems.

Status: Pending award; this position is contingent upon contract award, customer approval, funding availability, and completion of applicable DSA recruiting, security, and onboarding requirements.

#DSA209

#LI-MH1

DSA - Salary Pay Range

$120,000 - $150,000 USD

Many of DSA's positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. DSA is proud to be an Equal Opportunity Employer. DSA is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status. DSA requires background checks , where permitted , by law. DSA is an E-Verify Employer.