Senior Information Systems Security Officer (ISSO)

Dynamic Solutions Technology LLC; Linthicum (MD); On-site; USD 130,000 - 180,000; Full time

Job summary

Dynamic Solutions Technology, LLC is seeking a Senior Information Systems Security Officer (ISSO) to support a government customer in Linthicum, MD. Active secret clearance required for this exempt, full-time role.

The ISSO will lead RMF activities, artifact development, risk management, and government-facing coordination with ISSMs, CISOs, and System Owners, ensuring compliant cybersecurity across federal systems.

Qualifications

• Bachelor's degree in a relevant technical field; master's preferred.
• CISSP or DoD 8140/8570 IAT III/IAM III required.
• 5+ years in information systems security with federal/DoD experience.
• 5+ years RMF hands-on: security controls, assessment, ATO, POA&M.
• Experience developing SSPs/SARs/POA&Ms and authorization artifacts.
• Experience supporting RMF/ATO with ISSMs, CISOs, and system owners.
• Leadership in ConMon, vulnerability mgmt, audits, and remediation.
• Knowledge of NIST SP 800-53, NIST RMF, FISMA; enterprise security tools.

Responsibilities

• Serve as senior ISSO for technical execution and oversight of security activities.
• Interface with government stakeholders (ISSM, CISO, AO/AODR, system owners).
• Lead ISSO activities across RMF, artifacts, and authorization packages.
• Oversee RMF control implementation, assessments, and POA&M management.
• Maintain documentation accuracy and compliance for government submissions.
• Manage risk registers and escalate issues to leadership as needed.
• Lead ConMon, vulnerability management, and security assessments.
• Mentor ISSO personnel and ensure hands-on technical leadership.

Education

Bachelor's degree in Cybersecurity/Info Assurance/IT/CS/IS

Master's degree preferred

CISSP or DoD 8140/8570 IAT III/IAM III

CISM, CASP+, CCSP, CAP, GIAC certs preferred

Tools

CSAM

Splunk

ServiceNow

Tenable/Nessus

Qualys

Microsoft Defender

Microsoft Intune

BigFix

Microsoft Azure

Microsoft 365

Microsoft Entra ID

Okta

Palo Alto Panorama

Zscaler

Job description

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients, is seeking a full-time Senior Information Systems Security Officer (ISSO) to support the government customer located in Linthicum, MD. This is an exempt position.

ACTIVE SECRET CLEARANCE REQUIRED

Responsibilities

• Serve as the Contractor's senior ISSO and primary point of accountability for the technical execution, coordination, and oversight of information system security activities supporting assigned Federal systems.
• Act as the primary technical interface between the Contractor and Government stakeholders, including the Information System Security Manager (ISSM), Chief Information Security Officer (CISO), Authorizing Official/Authorizing Official Designated Representative (AO/AODR), and System Owners.
• Lead, coordinate, and oversee all Contractor ISSO activities to ensure consistent, compliant, and effective cybersecurity execution across supported information systems.
• Direct the development, review, maintenance, and submission of Risk Management Framework (RMF) and authorization-package artifacts, ensuring documentation is accurate, complete, current, and compliant with applicable Federal cybersecurity requirements.
• Lead cybersecurity authorization activities, including system categorization, security control implementation, assessment support, Plan of Action and Milestones (POA&M) management, security documentation, and authorization activities.
• Conduct internal quality assurance reviews of ISSO deliverables and authorization artifacts prior to Government submission to ensure technical accuracy, completeness, and compliance with contract and Government requirements.
• Manage cybersecurity risk and issue registers; identify, assess, document, track, and escalation security risks, vulnerabilities, deficiencies, and compliance issues to appropriate Contractor and Government leadership.
• Lead and support Continuous Monitoring (ConMon), vulnerability management, security control assessment, audit support, cybersecurity inspections, and other RMF-related workstreams as assigned.
• Participate in Government governance forums, technical reviews, cybersecurity working groups, and program meetings while representing the Contractor's technical interests and providing expert cybersecurity guidance.
• Maintain hands-on technical cybersecurity expertise and actively perform senior ISSO functions; provide technical leadership rather than functioning solely in an administrative or managerial capacity.
• Monitor system security posture and coordinate with system owners, cybersecurity personnel, system administrators, and technical teams to identify and resolve security deficiencies and maintain operational compliance.
• Utilize and maintain proficiency with cybersecurity and information technology platforms, including CSAM, ServiceNow, Splunk, Tenable/Nessus, Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler.
• Analyze security monitoring, vulnerability, configuration, and compliance data to support risk-based decision-making, incident response coordination, continuous monitoring, and overall system security posture management.
• Coordinate with the Contractor's Program Manager on contract-level requirements, including staffing, reporting, deliverable status, invoicing support, workload planning, and resolution of programmatic issues affecting cybersecurity execution.
• Provide technical leadership, mentoring, and knowledge transfer to ISSO and cybersecurity personnel while maintaining required qualifications, certifications, and technical proficiency throughout the period of performance.

Education, Certifications, and Experience

• Bachelor's degree from an accredited institution in Cybersecurity, Information Assurance, Information Technology, Computer Science, Information Systems, or a related technical discipline. A Master's degree in a related field is preferred.
• CISSP or another cybersecurity certification meeting the applicable DoD 8140/8570 IAT III/IAM III requirements is required.
• Preferred certifications include CISM, CASP+, CCSP, CAP, or GIAC security certifications.
• Personnel shall maintain all required certifications and professional qualifications throughout the period of performance.
• Minimum of 5years of progressively responsible experience in information systems security, cybersecurity, information assurance, or a related discipline, including at least 5 years supporting Federal Government or Department of Defense information systems.
• Minimum of 5 years of hands-on experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, continuous monitoring, POA&M management, and security documentation.
• Demonstrated experience developing, reviewing, maintaining, and submitting System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, security control documentation, and other authorization-package artifacts.
• Demonstrated experience supporting Authority to Operate (ATO) and authorization activities and working directly with ISSMs, CISOs, Authorizing Officials, System Owners, and other Government cybersecurity stakeholders.
• Experience leading Continuous Monitoring (ConMon), vulnerability management, security assessments, audits, inspections, and cybersecurity remediation activities.
• Demonstrated ability to lead and mentor cybersecurity/ISSO personnel while maintaining hands-on technical responsibilities.
• Experience with Federal cybersecurity standards and frameworks, including NIST SP 800-53, NIST RMF, FISMA, and applicable Federal and DoD cybersecurity policies.
• Working knowledge of enterprise cybersecurity technologies and platforms, including CSAM, Splunk, ServiceNow, Tenable/Nessus or Qualys, Microsoft Defender, Microsoft Intune, BigFix, Microsoft Azure, Microsoft 365, Microsoft Entra ID, Okta, Palo Alto Panorama, and Zscaler, with specific tools subject to task-order requirements.