Remote ISSO: DoD RMF & Cloud Security Lead

VulnU; United States; Remote; USD 150,000 - 170,000; Full time

Benefits offered by this job

Equity

Home office stipend

Flexible PTO

Learning budget

Annual professional development

Flexible remote work opportunities

401(k) with 3% company contribution

Generous parental leave

Job summary

Second Front Systems is seeking a detail-oriented ISSO to strengthen our cybersecurity and DevSecOps in DoD IL4/IL5 environments. You will manage RMF packages, eMASS authorizations, and continuous monitoring while translating DoD policy into actionable engineering guidance.

You will partner with ISSMs, assessors, and engineers to ensure defensible evidence and compliance readiness, including cloud-native mappings to RMF/NIST controls.

Qualifications

• 3–5 years DoD cybersecurity/ RMF/ IA in DoD ATO packages.
• Experience building and maintaining eMASS packages.
• Knowledge of DISA PPSM registrations, ports, data flows and CAL.
• Strong knowledge of NIST 800-53, RMF, and DoD guidance.
• Cloud security experience with AWS, containers, Kubernetes, CI/CD.
• Active U.S. Secret clearance; DoD 8570 IAM I/II or equivalent cert within 90 days.

Responsibilities

• Execute all phases of the RMF lifecycle for DoD IL4/IL5 environments.
• Own end-to-end eMASS authorization packages with artifacts and tests.
• Manage DISA PPSM registrations and data-flow documentation.
• Author SSPs, control narratives, POAMs, and RMF artifacts reflecting cloud architecture.
• Drive continuous monitoring: POA&M updates, patching, vulnerability tracking.
• Validate STIG compliance and analyze ACAS/Nessus results; drive remediation.
• Serve as technical POC for ISSMs, assessors, and Authorizing Officials.
• Map cloud-native controls to DoD RMF and NIST 800-53 with defensible evidence.

Skills

DoD cybersecurity

RMF authorization

eMASS experience

NIST 800-53

Cloud security

Written communication

Security clearance

CI/CD pipelines

Education

DoD 8570 IAM I/II

Tools

eMASS

ACAS

Nessus

STIG Viewer

Job description

Second Front Systems is seeking a detail-oriented ISSO to strengthen our cybersecurity and DevSecOps in DoD IL4/IL5 environments. You will manage RMF packages, eMASS authorizations, and continuous monitoring while translating DoD policy into actionable engineering guidance.

You will partner with ISSMs, assessors, and engineers to ensure defensible evidence and compliance readiness, including cloud-native mappings to RMF/NIST controls.