Mid-Level Information System Security Officer (ISSO)

i3; Huntsville (AL); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Long-term financial security

Higher job satisfaction

Greater job security

Personal and professional growth

Great company culture

Excellent insurance coverage

401(k) match

Generous PTO

Health and wellness incentives

Tuition and certification reimburse

i3 Cares community

Job summary

i3 in Huntsville, AL seeks a Mid-Level Information System Security Officer to support RMF lifecycle for an SDN in a DoD environment. You will handle day-to-day cybersecurity, RMF, vulnerability management, and continuous monitoring, coordinating with technical teams and leadership to maintain authorization and security posture.

Responsibilities include maintaining eMASS, producing POA&M, reviewing CTOs and DISA notices, and developing RMF artifacts such as SSPs and MOUs.

Qualifications

• Bachelor's degree in a related field; relevant experience may be substituted.
• 3–6 years of cybersecurity, ISSO, or information assurance in a DoD RMF environment.
• Active DoD 8140-compliant certification; Security+ or equivalent preferred.
• Experience maintaining authorization packages and supporting ATO in eMASS.
• Knowledge of ACAS/Nessus, DISA STIGs, POA&M, NIST SP 800-53, DoD RMF, CNSSI 1253.

Responsibilities

• Support implementation and sustainment of RMF and system ATO.
• Maintain eMASS authorization packages and vulnerability scans.
• Develop and track POA&M; coordinate remediation of findings.
• Review CTOs, DISA notices, and cybersecurity directives for applicability.
• Coordinate with tenants and technical teams to ensure compliance.
• Support risk assessments for new apps, hardware, and architecture changes.
• Develop RMF docs including SSPs, RARs, and interconnection agreements.
• Monitor federal DoD and NIST guidance; assist PQC/Zero Trust initiatives.
• Support assessments, inspections, configuration management, and monitoring.

Skills

Communication

Coordination

Teamwork

Detail oriented

Time management

Customer service

Education

Bachelor's degree in a related field

Tools

ACAS/Nessus

DISA STIGs

POA&M

NIST SP 800-53

DoD RMF

CNSSI 1253

Elastic SIEM

Job description

Overview

i3 is seeking a Mid-Level Information System Security Officer (ISSO) to support the Risk Management Framework (RMF) lifecycle for a Software Defined Network (SDN) supporting PAE Fires and Reveille Forge. The selected candidate will perform day-to-day cybersecurity, RMF, vulnerability management, and continuous monitoring activities while coordinating with technical teams, external tenants, and cybersecurity leadership to maintain the system's authorization and security posture.This position is located in Huntsville, AL at Redstone Arsenal.

Responsibilities

• Support implementation and sustainment of the DoD Risk Management Framework (RMF) and system Authorization to Operate (ATO).
• Maintain eMASS authorization packages, including ACAS/Nessus results, DISA STIG checklists, security controls, and supporting artifacts.
• Develop, track, and maintain POA&M and coordinate remediation of identified vulnerabilities and compliance findings.
• Review applicable USCYBERCOM Cyber Tasking Orders (CTOs), DISA vulnerability notifications, and other cybersecurity directives for system and tenant applicability.
• Coordinate with external tenants and technical teams to communicate cybersecurity requirements, track remediation activities, and validate compliance.
• Support risk assessments for new applications, hardware, system changes, external connections, and architecture enhancements.
• Develop and maintain RMF documentation, including SSPs, RARs, continuous monitoring documentation, and interconnection agreements (ISAs/MOUs).
• Monitor applicable Federal, DoD, and NIST cybersecurity guidance and support implementation of evolving requirements, including Zero Trust and Post-Quantum Cryptography (PQC).
• Support cybersecurity assessments, inspections, configuration management activities, and other continuous monitoring requirements.

Qualifications

• Bachelor's degree in a related field; relevant experience may be substituted in lieu of a degree.
• 3-6 years of cybersecurity, ISSO, information assurance, or security analyst experience supporting a DoD RMF environment.
• Current certification or qualification meeting applicable DoD 8140 requirements; Security+ or equivalent preferred.
• Experience maintaining authorization packages and supporting ATO sustainment activities in eMASS.
• Working knowledge of ACAS/Nessus, DISA STIGs, POA&M, NIST SP 800-53, DoD RMF, and CNSSI 1253.
• Familiarity with security monitoring/SIEM technologies such as Elastic is preferred.
• Active DoD SECRET security clearance.
• U.S. Citizenship required.
• Strong communication skills and ability to coordinate cybersecurity requirements with technical teams, leadership, and external organizations.

Knowledge/Skills

• Knowledge of office administration and procedures.
• Exceptional judgment capabilities and relationship management skills.
• Excellent communication, teamwork, and client service skills; ability to clearly communicate in discussions and written documents, and to deliver feedback clearly and tactfully.
• Interact with a diverse array of customers and staff in a professional and courteous manner.
• Work independently with accountability for accurate and complete results.
• Be extremely organized and exceptionally detail oriented.
• Work well both independently and in a team environment.
• Be energized by a fast-paced work environment.
• Must be able to communicate with others effectively.
• Analyze information and respond appropriately.
• Manage time wisely and prioritize tasks.
• Provide superior customer service.
• Multi-task in a pleasant manner.
• Work well under pressure.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; handle or feel; and reach with hands and arms. The employee is occasionally required to sit; climb or balance; and stoop, kneel, crouch or crawl. The employee must be able to lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus.

Regular i3 hours

Regular i3 hours are 8:00 a.m. - 5:00 p.m. Monday-Friday, however, additional hours may be required on occasion. Regular and punctual attendance is required.

About i3

i3 is a technically diverse, 100% team member owned business, headquartered in Huntsville, Alabama specializing in missile and aviation systems engineering and logistic services, electronic warfare and electromagnetic effects analysis, UAS system integration and flight operations, full lifecycle C5ISR engineering services, cybersecurity and IT/IA innovative solutions and virtual training, simulation & serious game development and implementation. We have established a broad offering of products and capabilities collectively providing decades of experience supporting the full complement of DoD military services, Missile Defense Agency, National Aeronautics and Space Administration, and a variety of other Government organizations and private industry customers.

Perks of being a team member owner include:

• Long-term financial security
• Higher job satisfaction
• Greater job security
• Personal and professional growth
• Great company culture

Other outstanding benefits:

• Excellent insurance coverage
• 401(k) match
• Generous PTO
• Health and wellness incentives
• Tuition and certification reimbursement
• Countless opportunities to give back to the community through i3 Cares