Lead Senior Information Systems Security Officer (ISSO)

Dynamic Solutions Technology LLC; Washington (District of Columbia); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Dynamic Solutions Technology, LLC seeks a Lead Senior Information Systems Security Officer (ISSO) to support a Washington, DC government customer in a hybrid remote role with on-site two days weekly.

The Senior ISSO will lead RMF-related activities, interface with government stakeholders, and drive continuous monitoring, risk management, and authorization artifacts across federal systems.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, IT, CS, or related field. Master’s preferred.
• CISSP or DoD 8140/8570 IAT III/IAM III required.
• 8+ years in information systems security with 5+ years supporting Federal/DoD information systems.
• 5+ years hands-on RMF: security controls, assessment, authorization, continuous monitoring, POA&M, docs.

Responsibilities

• Serve as senior ISSO and primary accountability for security activities on Federal systems.
• Interface with Government stakeholders (ISSM, CISO, AO/AODR, System Owners).
• Lead ISSO activities for compliant cybersecurity execution across systems.
• Develop, review, maintain, and submit RMF artifacts (SSPs, SARs, POA&Ms).
• Lead security authorization activities, including system categorization and control implementation.
• Perform internal QA of ISSO deliverables prior to Government submission.
• Manage risk and escalate security issues to leadership.
• Support ConMon, vulnerability management, audits, inspections, and RMF workstreams.
• Participate in governance forums and program meetings with Contractor technical leadership.
• Maintain hands-on ISSO activities and provide mentorship and guidance.

Skills

Team leadership

RMF governance

Senior ISSO experience

Federal government cybersecurity

Vulnerability management

Education

Bachelor's degree in Cybersecurity/Information Assurance/IT

Master's degree preferred

Tools

CSAM

Splunk

ServiceNow

Tenable/Nessus or Qualys

Microsoft Defender

Microsoft Intune

BigFix

Microsoft Azure

Microsoft 365

Microsoft Entra ID

Okta

Palo Alto Panorama

Zscaler

Job description

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Lead Senior Information Systems Security Officer (ISSO) to support the government customer located in Washington, DC. This is an exempt hybrid remote position. (A minimum of TWO days per week reporting to site; additional support as needed on a case‑by‑case basis)

MUST BE A U.S. CITIZEN

Responsibilities:

• Serve as the Contractor's senior ISSO and primary point of accountability for the technical execution, coordination, and oversight of information system security activities supporting assigned Federal systems.
• Act as the primary technical interface between the Contractor and Government stakeholders, including the Information System Security Manager (ISSM), Chief Information Security Officer (CISO), Authorizing Official/Authorizing Official Designated Representative (AO/AODR), and System Owners.
• Lead, coordinate, and oversee all Contractor ISSO activities to ensure consistent, compliant, and effective cybersecurity execution across supported information systems.
• Direct the development, review, maintenance, and submission of Risk Management Framework (RMF) and authorization-package artifacts, ensuring documentation is accurate, complete, current, and compliant with applicable Federal cybersecurity requirements.
• Lead cybersecurity authorization activities, including system categorization, security control implementation, assessment support, Plan of Action and Milestones (POA&M) management, security documentation, and authorization activities.
• Conduct internal quality assurance reviews of ISSO deliverables and authorization artifacts prior to Government submission to ensure technical accuracy, completeness, and compliance with contract and Government requirements.
• Manage cybersecurity risk and issue registers; identify, assess, document, track, and escalate security risks, vulnerabilities, deficiencies, and compliance issues to appropriate Contractor and Government leadership.
• Lead and support Continuous Monitoring (ConMon), vulnerability management, security control assessment, audit support, cybersecurity inspections, and other RMF-related workstreams as assigned.
• Participate in Government governance forums, technical reviews, cybersecurity working groups, and program meetings while representing the Contractor's technical interests and providing expert cybersecurity guidance.
• Maintain hands‑on technical cybersecurity expertise and actively perform senior ISSO functions; provide technical leadership rather than functioning solely in an administrative or managerial capacity.
• Monitor system security posture and coordinate with system owners, cybersecurity personnel, system administrators, and technical teams to identify and resolve security deficiencies and maintain operational compliance.
• Utilize and maintain proficiency with cybersecurity and information technology platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler.
• Analyze security monitoring, vulnerability, configuration, and compliance data to support risk-based decision-making, incident response coordination, continuous monitoring, and overall system security posture management.
• Coordinate with the Contractor's Program Manager on contract-level requirements, including staffing, reporting, deliverable status, invoicing support, workload planning, and resolution of programmatic issues affecting cybersecurity execution.
• Provide technical leadership, mentoring, and knowledge transfer to ISSO and cybersecurity personnel while maintaining required qualifications, certifications, and technical proficiency throughout the period of performance.

Education, Certifications, and Experience:

• Bachelor's degree from an accredited institution in Cybersecurity, Information Assurance, Information Technology, Computer Science, Information Systems, or a related technical discipline. A Master's degree in a related field is preferred.
• CISSP or another cybersecurity certification meeting the applicable DoD 8140/8570 IAT III/IAM III requirements is required.
• Preferred certifications include CISM, CASP+, CCSP, CAP, or GIAC security certifications.
• Personnel shall maintain all required certifications and professional qualifications throughout the period of performance.
• Minimum of 8 years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline, including at least 5 years supporting Federal Government or Department of Defense information systems.
• Minimum of 5 years of hands‑on experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, continuous monitoring, POA&M management, and security documentation.
• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts.
• Demonstrated experience supporting Authority to Operate (ATO) and authorization activities and working directly with ISSMs, CISOs, Authorizing Officials, System Owners, and other Government cybersecurity stakeholders.
• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities.
• Demonstrated ability to lead and mentor cybersecurity/ISSO personnel while maintaining hands‑on technical responsibilities.
• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA, and applicable Federal and DoD cybersecurity policies.
• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler, with specific tools subject to task‑order requirements.