Senior Information System Security Officer (ISSO)

The Amatriot Group; Washington (District of Columbia); On-site; USD 150,000 - 210,000; Full time

Job summary

The Amatriot Group is seeking a Senior Information System Security Officer to support RMF, security authorization, and risk management across a large enterprise IT program at JBAB, Washington, DC.

The role requires active TS/SCI, extensive ISSO experience, and proficiency with Nessus/ACAS, Splunk, STIGs, and SCAP tools, along with DoD 8570 IAT Level II/III certifications.

Qualifications

• 6 years of cybersecurity work experience will be considered in lieu of a bachelor’s degree.
• Proven ISSO experience across large-scale enterprise IT programs.
• Familiarity with RMF, ATO processes and security authorization standards.

Responsibilities

• Assist RMF documentation and artifacts, enforcing security controls.
• Support security authorization and accreditation activities.
• Collaborate to assess and integrate security controls and monitor posture.
• Conduct security assessments and maintain security-related documentation.

Skills

ISSO experience

Scrum methodologies

Security policy understanding

Strong communication

Analytical thinking

Education

6 years cybersecurity work experience in lieu of a bachelor’s degree

Tools

Nessus/ACAS

Splunk

STIGs

SCAP tools

Job description

Location: Joint Base Anacostia-Bolling (JBAB) - Washington, DC

Security Clearance: Active TS/SCI [Required]

Job Type: Full-Time

Target Salary Range*: $150,000 - $210,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Senior Information System Security Officer supports cybersecurity, security authorization, and Risk Management Framework activities across a large-scale enterprise Information Technology program. This role assists with RMF documentation, security control implementation, security assessments, vulnerability identification, and maintenance of system security posture.

Key Responsibilities

RMF Documentation and Security Authorization

• Assist in the development and maintenance of RMF documentation and artifacts, ensuring proper security controls and safeguards are implemented for all systems.


• Provide support for security authorization and accreditation processes.


• Ensure compliance with federal laws and regulations.


• Assist in the creation of security documentation.

Security Control Assessment and Integration

• Collaborate with the ISSE and other engineering teams to assess and integrate security controls.


• Provide security guidance for design and implementation efforts.


• Monitor and manage the security posture of systems.


• Ensure security controls are effective and compliant with applicable standards and regulations.

Security Assessments and Documentation

• Conduct security assessments and audits.


• Identify vulnerabilities and recommend mitigations to strengthen the overall security posture.


• Review and maintain security-related documentation.


• Ensure all system components and information types are clearly described and aligned with security policies.

Qualifications

Education

• 6 years of cybersecurity work experience will be considered in lieu of a bachelor’s degree.

Experience

• Proven ISSO experience across a large-scale enterprise Information Technology program.


• Experience with Scrum methodologies.


• Proficiency with Nessus/ACAS, Splunk, STIGs, and SCAP tools.

Skills

• Strong written and verbal communication skills.


• Analytical and problem-solving abilities.


• Teamwork and collaboration skills.


• Organizational and multitasking skills.

Certifications

• DoD 8570.1-M IAT Level II certification, such as Security+ CE or CAP. [Required]

Clearance

• Top Secret clearance with SCI eligibility. [Required]

Preferred Qualifications

• ITILv4 Foundation certification.


• Experience with ServiceNow.


• Proficiency with eMASS and Xacta.


• DoD 8570.1-M IAT Level III certification, such as CISSP or CISM.