Mid-Level ISSO – DoD RMF & Cloud Security (Onsite)

Quantum Research International; Huntsville (AL); Sur place; USD 90 000 - 140 000; Plein temps

Résumé du poste

Quantum Research International seeks a mid-level Information System Security Officer (ISSO) to support an Army program within the ECMA. The ISSO will maintain the system’s security posture in accordance with DoD RMF, lead CCB participation, and oversee continuous monitoring activities across audits, accounts, and vulnerability remediation.

Responsibilities include managing CMP/AMP/SSP, ISCP exercises, IS vulnerability responses, and guidance to the infrastructure team to ensure compliance.

Qualifications

• Bachelor's degree in CS/IS or five years of comparable work experience.
• 4 years of verifiable ISSO/ISSE experience.
• Knowledge of DoD RMF with NIST 800-53 guidance.

Responsabilités

• Develop and maintain security documentation (STIG/SRG) and RMF artifacts.
• Coordinate with government SO/ISSM to ensure ATO conditions.
• Provide security design guidance across RMF phases and stakeholders.
• Oversee daily security operations: access controls, logs, vulnerabilities, and remediation.
• Prepare SIAs for SCRs to support CCB reviews and decision-making.
• Review security assessments and coordinate remediation in response to CTOs/IAVAs.
• Serve as IS primary POC with SCA and manage POA&M in eMASS.

Connaissances

BS in CS/IS

ISSO/ISSE 4y

DoD 8510/NIST 800-53 RMF

DoD 8140 / DCWF

eMASS knowledge

TS clearance eligible

Security+ / CISSP / AWS/Azure

Formation

Bachelor’s degree in Computer Science or Information Systems

Outils

eMASS

Description du poste

Quantum Research International seeks a mid-level Information System Security Officer (ISSO) to support an Army program within the ECMA. The ISSO will maintain the system’s security posture in accordance with DoD RMF, lead CCB participation, and oversee continuous monitoring activities across audits, accounts, and vulnerability remediation.

Responsibilities include managing CMP/AMP/SSP, ISCP exercises, IS vulnerability responses, and guidance to the infrastructure team to ensure compliance.