ME00673-Senior Information System Security Officer (ISSO)

Momentum Engineering, Inc.; Washington; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Company-sponsored group medical plan

Dental, vision, life insurance

STD/LTD plans

Job summary

Momentum Engineering, Inc. seeks a Senior ISSO to support Federal cybersecurity operations, focusing on RMF execution, continuous monitoring, and authorization maintenance.

The role involves close collaboration with Lead ISSO, ISSM, System Owners, and cybersecurity stakeholders. Responsibilities include maintaining SSPs/POA&Ms, conducting security posture reviews, vulnerability management coordination, and preparing authorization artifacts.

Qualifications

• U.S. Citizenship required.
• Tier 4 High-Risk Public Trust eligibility required or obtainable.
• Bachelor’s degree in Cybersecurity, IT, CS, IS or related field.
• 5+ years of cybersecurity experience.
• 3+ years supporting Federal cybersecurity or RMF activities.
• Experience supporting SSP development and authorization package maintenance.
• Experience with continuous monitoring and vulnerability management.
• Experience supporting audits, assessments, and compliance activities.
• Familiarity with Federal cybersecurity requirements and NIST guidance.

Responsibilities

• Support RMF activities throughout the authorization lifecycle.
• Maintain SSPs, POA&Ms, control implementation statements, and documentation.
• Perform continuous monitoring activities and security posture reviews.
• Support vulnerability management analysis, tracking, and remediation coordination.
• Prepare and update authorization package artifacts.
• Conduct security impact analyses for changes affecting supported systems.
• Support audit readiness reviews and assessment preparation.
• Coordinate evidence collection and artifact management.
• Maintain cybersecurity records, repositories, and documentation.
• Participate in governance forums and security working groups.
• Track corrective actions and POA&M status through closure.
• Provide system-level cybersecurity guidance and recommendations.

Skills

5+ years of cybersecurity experience

3+ years Federal RMF

Continuous monitoring

Vulnerability management

Audit readiness

Documentation maintenance

Familiarity with NIST guidance

Education

Bachelor’s degree in Cybersecurity/IT/CS/IS or related field

Job description

Job Summary

• Seeking experienced Senior Information System Security Officers (ISSOs) to support Federal cybersecurity operations focused on continuous monitoring, RMF execution, authorization maintenance, vulnerability management, audit readiness, and cybersecurity governance
• Senior ISSOs serve as cybersecurity subject matter experts supporting assigned systems while working closely with Lead ISSO, ISSM, System Owners, and other cybersecurity stakeholders

Primary Responsibilities

• Support RMF activities throughout the authorization lifecycle
• Maintain SSPs, POA&Ms, control implementation statements, and support cybersecurity documentation
• Perform continuous monitoring activities and security posture reviews
• Support vulnerability management analysis, tracking, and remediation coordination
• Prepare and update authorization package artifacts
• Conduct security impact analyses for changes affecting supported systems
• Support audit readiness reviews and assessment preparation activities
• Coordinate evidence collection and artifact management
• Maintain cybersecurity records, repositories, and documentation
• Participate in governance forums and security working groups
• Track corrective actions and POA&M status through closureProvide system-level cybersecurity guidance and recommendations

Required Qualifications

• U.S. Citizenship required
• Ability to obtain and maintain a Tier 4 High-Risk Public Trust
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field
• 5+ years of cybersecurity experience
• 3+ years supporting Federal cybersecurity or RMF activities
• Experience supporting SSP development and authorization package maintenance
• Experience with continuous monitoring and vulnerability management
• Experience supporting audits, assessments, and compliance activities
• Familiarity with Federal cybersecurity requirements and NIST guidance

Desired Qualifications

• One or more of the following:
• • Security+
  • CGRC
  • CISSP
  • CAP
  • CISM
  • GSEC
• Desired technical experience:
• • CSAM
  • ServiceNow
  • Splunk
  • Tenable
  • Qualys
  • Microsoft Azure
  • Microsoft 365
  • Entra ID
  • Governance, Risk, and Compliance (GRC) platforms

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.