OT Security Officer (ISSO) – RMF Specialist II

OneZero Solutions; Baltimore (MD); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) matching

Paid time off

Holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is recruiting an Information System Security Officer Level II to oversee RMF for USCG SFLC Operational Technology and Platform IT systems at Baltimore sites. You will lead RMF, prepare authorization packages, conduct continuous monitoring, and manage POA&Ms through closure to keep ATO active.

The role requires five+ years in cybersecurity, DoD/NIST RMF experience, and certification in IAM levels, with on-site work Monday–Friday 0800–1600 ET.

Qualifications

• Five (5) or more years of cybersecurity experience, including at least three (3) years performing ISSO or equivalent RMF duties in a federal environment.
• Experience creating, tracking, and closing POA&Ms and maintaining supporting artifacts.
• Experience running or interpreting STIG-based compliance assessments and vulnerability scans.
• Experience maintaining cybersecurity documentation within a Government A&A tracking tool.

Responsibilities

• Serve as the designated OT Security Officer (ISSO) for assigned SFLC Operational Technology and lead the RMF process for those systems.
• Support the OT Security Manager (ISSM) and staff in maintaining the programs, procedures, and policies that protect Government Sensitive But Unclassified (SBU) information.
• Review existing policies, procedures, and guidelines for compliance with DHS, USCG, and DoD cybersecurity policy; draft or revise SFLC policy documentation for ISSM review and approval.
• Prepare and maintain RMF security authorization documentation for assigned OT, ensuring Assessment and Authorization (A&A) packages are completed and submitted to the Authorizing Official in sufficient time to prevent expiration of the Authorization to Operate (ATO).
• Maintain Host Based Security System (HBSS/ESS) compliance for assigned OT and review applicable system reports.
• Create and validate SFLC RMF and security authorization accounts within Government-designated systems and tools.
• Update and maintain RMF and authorization status and associated cybersecurity documentation within Government-designated tracking tools, keeping documentation current and accessible to authorized individuals.
• Manage and track POA&Ms for assigned OT from creation through closure: validate content with stakeholders, track remediation, maintain supporting artifacts, and identify items requiring waivers or risk acceptance.
• Maintain the continuous monitoring process for assigned OT and support compliance with DoD and USCG cybersecurity requirements and DISA STIGs.
• Perform vulnerability and security compliance assessments for assigned OT using Government-approved methods and tools, including DISA STIGs and Security Requirements Guides.
• Conduct, review, and analyze vulnerability and compliance scans of assigned OT, networks, devices, and associated components.
• Coordinate with system administrators and stakeholders to remediate vulnerabilities and compliance findings, and initiate protective or corrective measures per Government policy.
• Review system logs, audit records, and intrusion detection data for assigned OT to identify incidents, threats, and vulnerabilities; request system audit triggers and correlate audit records at least weekly; report incidents and log integrity gaps to the Government and coordinate incident response.
• Support the Request for Modification (RFM) and change management processes; participate in change management boards and conduct Security Impact Assessments (SIAs) on proposed changes.
• Develop and maintain connection approval documentation for assigned OT requiring USCG network connectivity, including Interconnection Security Agreements (ISAs), Memoranda of Understanding (MOUs), and Service Level Agreements (SLAs).
• Develop and coordinate Contingency Plan (CP) training and testing; coordinate annual Disaster Recovery failover testing for systems with a DR capability and document results for Government review.
• Support and coordinate external inspections, evaluations, audits, and assessments applicable to assigned OT.
• Review security exception and exclusion requests for assigned OT and provide recommendations to the Government.

Skills

RMF familiarity

RMF/A&A packages

Vulnerability assessment

Security documentation

English communication

Education

Bachelor's degree in cybersecurity / information systems / CS

Tools

eMASS

ACAS/Nessus

STIGs tooling

Disaster Recovery tooling

Job description

OneZero Solutions, LLC is recruiting an Information System Security Officer Level II to oversee RMF for USCG SFLC Operational Technology and Platform IT systems at Baltimore sites. You will lead RMF, prepare authorization packages, conduct continuous monitoring, and manage POA&Ms through closure to keep ATO active.

The role requires five+ years in cybersecurity, DoD/NIST RMF experience, and certification in IAM levels, with on-site work Monday–Friday 0800–1600 ET.