Remote ISSO for Federal RMF & ATO Programs

WinTrio LLC; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Healthcare (Medical, Dental, Vision)

401(k) and Retirement Savings Plan

Annual Bonus and Profit Sharing

Paid Time Off (PTO)

Flexible Spending Account (FSA)

Job summary

WinTrio LLC is seeking an experienced Information System Security Officer (ISSO) to support Federal information systems through RMF, ATO, and security documentation. You will work with SSOs, SCAs, developers, and program leadership to maintain compliance and strengthen cybersecurity posture.

The role emphasizes risk management, POA&M management, vulnerability remediation, and continuous monitoring within federal environments. Remote U.S. work with occasional travel.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, Engineering, or related field.
• Minimum five (5) years of cybersecurity or information security experience supporting Federal systems.
• Experience with RMF, ATO, security documentation, POA&M management, and continuous monitoring.

Responsibilities

• Support RMF and ATO activities for Federal apps, infrastructure, databases, cloud-hosted systems, and enterprise platforms.
• Develop, review, and maintain cybersecurity documentation (SSPs, CPs, IRPs, CMPs, PTAs, PIAs, and more).
• Track and validate security controls against NIST SP 800-53 requirements and agency policies.
• Monitor vulnerability scans, coordinate remediation, and validate closure evidence.
• Support continuous monitoring, security assessments, audits, and compliance reporting.

Skills

RMF

NIST SP 800-53

FISMA

Vulnerability Assessments

Cloud Security

Communication

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

eMASS

Xacta

CSAM

RSA Archer

ACAS

Nessus/Tenable/Qualys

Job description

WinTrio LLC is seeking an experienced Information System Security Officer (ISSO) to support Federal information systems through RMF, ATO, and security documentation. You will work with SSOs, SCAs, developers, and program leadership to maintain compliance and strengthen cybersecurity posture.

The role emphasizes risk management, POA&M management, vulnerability remediation, and continuous monitoring within federal environments. Remote U.S. work with occasional travel.