Onsite ISSO — RMF/NIST Security Lead (DoD)

Venesco, LLC; Aberdeen, Northern (MD, KY); Hybrid; USD 95,000 - 125,000; Full time

Job summary

Venesco, LLC in Maryland is seeking an Information Systems Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems onsite 3-5 days a week.

You will maintain RMF documentation, support continuous monitoring, track vulnerabilities, and manage POA&Ms to ensure compliance with DoD and NIST requirements.

The ideal candidate holds an active Secret clearance, CISSP or DoD 8140 certs, and hands-on experience with SSPs, eMASS, and vulnerability management.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• Typically, 2–4 years of cybersecurity or information assurance experience.
• Active Secret clearance
• Relevant DoD 8140 certifications such as CISSP strongly preferred
• Working knowledge of NIST SP 800-53, and DoD cybersecurity compliance processes
• Experience with SSPs, POA&Ms, vulnerability management, and audit evidence collection
• Familiarity with eMASS, ACAS/Tenable, STIG Viewer, and related compliance tools
• Strong documentation, analytical, and issue-tracking skills
• Ability to work with technical and non-technical stakeholders

Responsibilities

• Maintain and update the System Security Plan (SSP) and related RMF artifacts
• Support continuous monitoring activities, including log review, control checks, and security status tracking
• Create, update, and track POA&M for identified weaknesses and remediation actions
• Analyze vulnerability scan results and validate DISA STIG compliance findings; support RMF steps
• Maintain system records in eMASS and support package updates
• Coordinate incident response activities for assigned systems
• Partner with system owners, admins, engineers, and the ISSM to resolve security issues

Job description

Venesco, LLC in Maryland is seeking an Information Systems Security Officer (ISSO) to support the day-to-day cybersecurity posture of assigned information systems onsite 3-5 days a week.

You will maintain RMF documentation, support continuous monitoring, track vulnerabilities, and manage POA&Ms to ensure compliance with DoD and NIST requirements.

The ideal candidate holds an active Secret clearance, CISSP or DoD 8140 certs, and hands-on experience with SSPs, eMASS, and vulnerability management.