Lead Cybersecurity Engineer & ISSO - RMF/Zero Trust in AWS

DSA; Morgantown (WV); On-site; USD 120,000 - 150,000; Full time

Job summary

DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role aims to reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. The position requires DoD/federal experience and an active Secret clearance.

Qualifications

• Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; additional experience may be considered in lieu of degree where permitted.
• At least 8 years of cybersecurity, ISSO, RMF, information assurance, or security engineering experience supporting DoD, Army, IC, or federal systems.
• Experience with DoDI 8500.01, DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, STIGs, IAVMs, ACAS, SCAP, POA&M management, and eMASS artifacts.
• Experience with AWS security services, cloud logging, SIEM integration, Zero Trust, container security, secure DevSecOps, and continuous ATO practices.
• Strong coordination skills with ISSM, AO, SCA-V, CSSP, engineering, operations, and program management stakeholders.
• Active Secret-level clearance.

Responsibilities

• Serve as the lead cybersecurity engineer and ISSO supporting RMF lifecycle execution and ATO sustainment.
• Maintain RMF artifacts, security plans, control evidence, POA&Ms, scan results, waiver documentation, and eMASS-ready documentation.
• Coordinate vulnerability remediation using ACAS, SCAP, STIG, IAVM, dependency scanning, container scanning, and configuration validation results.
• Support continuous monitoring, cybersecurity reporting, audit readiness, cyber inspections, verification of fixes, and Government ISSM/ISSO coordination.
• Embed cyber review into change control, release planning, cloud operations, DevSecOps pipelines, and modernization increments.
• Support Zero Trust-aligned implementation across identity, device, network, application, data, automation, and visibility controls.

Skills

RMF lifecycle experience

DoD/federal systems experience

Security coordination with ISSM/AO

Zero Trust implementation

Education

Bachelor's degree in cybersecurity, computer science, information systems, engineering, or related field

Tools

ACAS

SCAP

POA&M management

eMASS artifacts

STIGs / IAVM

AWS security services

SIEM integration

Job description

DSA is seeking a Lead Cybersecurity Engineer/ISSO to support RMF/ATO continuity, continuous monitoring, vulnerability remediation, STIG/IAVM compliance, cybersecurity reporting, and Zero Trust-aligned controls in a secure AWS IL5 environment.

This role aims to reduce accreditation, operational, and audit risk while maintaining the security posture required for uninterrupted mission support. The position requires DoD/federal experience and an active Secret clearance.