Senior ISSM — RMF/ATO Specialist (TS/SCI)

JASINT Consulting and Technologies, LLC; Fort Meade (MD); Presencial; USD 110.000 - 150.000; Jornada completa

Descripción de la vacante

JASINT Consulting and Technologies, LLC is seeking a seasoned ISSM professional to execute RMF activities for DoD information systems at Fort Meade. You will lead risk analysis, implement security controls, and maintain authorization to operate (ATO) status.

The role requires Top Secret/SCI access, hands-on experience with RMF lifecycle phases, STIGs, SCAP, and monitoring tools. A strong focus on documentation, risk mitigation, and cross-team collaboration is essential.

Formación

• At least 5 years of DoD experience performing ISSM duties on DoD information systems
• At least 3 years as an operating system administrator or auditor
• Working knowledge of DoD STIGs, ICD, NIST, ISO, and CNSS
• Demonstrated ability to assess business risk, classify threats, and improve security controls
• Must have JWICS and SIPR access

Responsabilidades

• Conduct RMF assessments and implement countermeasures.
• Help authorize hardware and software under RMF.
• Support the ISSM/ISO through the full RMF lifecycle: categorize, select, implement, assess, authorize, and monitor.
• Monitor the ESS security posture.
• Assess vulnerabilities using SCAP, ACAS, and HBSS.
• Analyze STIGs and develop a compliance strategy.
• Build POA&Ms for risks that can’t be fixed because of operational constraints.
• Maintain the eMASS repository and keep the ATO current.

Conocimientos

DoD ISSM

Risk assessment

Security controls

JWICS access

SIPR access

STIG knowledge

Herramientas

SCAP

ACAS

HBSS

eMASS

JWICS

SIPR

Descripción del empleo

JASINT Consulting and Technologies, LLC is seeking a seasoned ISSM professional to execute RMF activities for DoD information systems at Fort Meade. You will lead risk analysis, implement security controls, and maintain authorization to operate (ATO) status.

The role requires Top Secret/SCI access, hands-on experience with RMF lifecycle phases, STIGs, SCAP, and monitoring tools. A strong focus on documentation, risk mitigation, and cross-team collaboration is essential.