Senior ISSO

RJ IT Solutions; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

RJ IT Solutions is seeking a seasoned federal cybersecurity professional to lead continuous monitoring, risk management, and audit readiness for a government program.

You will coordinate incident response with the DFC SOC, support vulnerability management and POA&M lifecycles, and ensure evidence remains audit-ready while keeping up with CSAM, ServiceNow, and Splunk.

Qualifications

• Ten+ years of federal cybersecurity experience.
• Hands-on authorization package development and security control assessment.
• Operational experience with a federal GRC platform and an enterprise SIEM.
• Active CISSP certification.

Responsibilities

• Execute continuous monitoring and posture management for government risk decisions.
• Coordinate incident response with the DFC SOC and document actions.
• Support audits and assessments with traceability and gap identification.
• Assist vulnerability analysis and POA&M lifecycle with remediation teams.
• Maintain proficiency in CSAM, ServiceNow, Splunk, and scanning platforms.

Skills

Federal cybersecurity experience

Authorization package development

Security control assessment

GRC platform experience

Enterprise SIEM

SOC coordination during incidents

CISSP

Tools

CSAM

ServiceNow

Splunk

Vulnerability scanners

Job description

Purpose.

Carry continuous monitoring, incident response coordination, and audit and assessment support; serve as second-line backup to the Lead ISSO.

Reports to:

Lead ISSO for task direction.

Core Responsibilities.

• Execute continuous monitoring and security posture management, producing outputs that support Government risk decisions, audit readiness, and ongoing authorization.
• Coordinate incident response with the DFC SOC, meeting the acknowledgement and notification timeframes in the PWS, and maintain incident documentation and after‑action records.
• Support audits and assessments: maintain audit‑ready evidence, sustain traceability between requirements and artifacts, reduce evidence‑collection burden on Government staff, and identify documentation gaps before assessors do.
• Support vulnerability analysis and POA&M lifecycle activities in coordination with remediation teams, recognizing that closure approval, schedule extensions, and risk acceptance are reserved to Government officials.
• Maintain proficiency in CSAM, ServiceNow, Splunk, and the vulnerability scanning platforms in use.

Required qualifications.

Ten or more years of federal cybersecurity experience. Hands‑on authorization package development and security control assessment. Operational experience with a federal GRC platform and an enterprise SIEM. Demonstrated coordination with an agency security operations center during live incidents. Active CISSP.

Preferred.

CGRC or CEH. Direct CSAM experience. Prior support to a federal civilian CISO organization. Existing federal background investigation eligible for reciprocity under PWS 5.4.