Mission-Critical ISSO: Cloud Security & RMF Leader

Jobtailor; Maryland; On-site; USD 120,000 - 170,000; Full time

Job summary

Jobtailor seeks an experienced Information System Security Officer to detect and document security configurations, implement DoD RMF controls, and guide clients through risk-based decisions. You will coordinate with vendors and internal teams to translate IT needs into secure plans and mitigation steps.

Strong background in NIST 800-53, STIGs, and cloud security is required. A TS/SCI with polygraph willingness is preferred, with on-site collaboration in a fast-paced environment.

Qualifications

• Experience with tools assessments and configuration analysis against best practices and government guidelines.
• Experience implementing security controls to achieve ATO in IT solutions.
• Experience with DoD STIGs, tests, and related tooling.

Responsibilities

• Detect, evaluate, and document the security configuration of tools and their security impacts.
• Lead security improvement recommendations and coordinate with in-house teams.
• Translate customer IT needs into secure, effective solution plans.
• Investigate new techniques and technologies beyond legacy approaches.
• Lead teams through network design approaches balancing security and mission needs.
• Advise clients by leading discovery of cyber risks and understanding policies.
• Develop mitigation plans and guide action through presentations and milestones.

Skills

Security configuration management

Risk analysis

NIST RMF/800-53 implementation

Policy & compliance

Client communication

Education

HS diploma or GED (7+ yrs IT projects)

Associate’s degree (5+ yrs)

Bachelor’s degree (3+ yrs)

Master’s degree (1+ yrs)

Tools

Ansible

Terraform

Splunk

STIG Viewer

HBSS

AWS

Azure

GCP

SCAP

ACAS

Job description

Jobtailor seeks an experienced Information System Security Officer to detect and document security configurations, implement DoD RMF controls, and guide clients through risk-based decisions. You will coordinate with vendors and internal teams to translate IT needs into secure plans and mitigation steps.

Strong background in NIST 800-53, STIGs, and cloud security is required. A TS/SCI with polygraph willingness is preferred, with on-site collaboration in a fast-paced environment.