Lead Cybersecurity Engineer & ISSO — RMF/Zero Trust/AWS

DSA Inc.; Morgantown (WV); On-site; USD 120,000 - 150,000; Full time

Job summary

DSA Inc. in Morgantown, WV seeks a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. DSA Inc.

Qualifications

• 8+ years of cybersecurity, ISSO, RMF, or security engineering experience.
• Experience with DoDI 8500.01/8510.01, NIST SP 800-37/53, STIGs, IAVMs, ACAS, SCAP, POA&M, and eMASS.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, and DevSecOps.
• Strong coordination with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management.
• Active Secret clearance.

Responsibilities

• Lead cybersecurity engineering and ISSO activities for RMF lifecycle and ATO sustainment.
• Maintain RMF artifacts, security plans, POA&Ms, scan results, waivers, and eMASS-ready docs.
• Coordinate vulnerability remediation using ACAS, SCAP, STIGs, IAVMs, and container scans.
• Support continuous monitoring, cybersecurity reporting, and audit readiness.
• Integrate cyber review into change control, release planning, cloud ops, and DevSecOps.
• Support Zero Trust implementation across identity, device, network, app, data, automation, visibility.

Skills

Cybersecurity

ISSO experience

RMF process

Zero Trust

Cloud security

Stakeholder coordination

Clearance

Education

Bachelor's degree or higher in cybersecurity, CS, or related

Tools

ACAS

SCAP

STIG

IAVM

eMASS

POA&M management

AWS security services

Job description

DSA Inc. in Morgantown, WV seeks a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role will reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. DSA Inc.