Senior ISSO

RJIT Solutions; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

RJIT Solutions in Washington, DC seeks an experienced cybersecurity professional to oversee continuous monitoring, incident response coordination, and audit support as a second-line backstop to the Lead ISSO.

You will drive security posture management, coordinate with the DFC SOC during incidents, and ensure evidence-ready artifacts for audits and assessments, leveraging CSAM, ServiceNow, and Splunk expertise.

Qualifications

• Ten+ years of federal cybersecurity experience.
• Hands-on authorization package development and security control assessment.
• Operational experience with a federal GRC platform and an enterprise SIEM.
• Demonstrated coordination with an agency security operations center during live incidents.
• Active CISSP.

Responsibilities

• Execute continuous monitoring and security posture management to support risk decisions, audits, and authorization.
• Coordinate incident response with the DFC SOC and maintain incident documentation and after-action records.
• Support audits and assessments by maintaining audit-ready evidence and closing documentation gaps.
• Assist vulnerability analysis and POA&M lifecycle activities with remediation teams and government oversight.

Skills

Incident response

Continuous monitoring

Risk assessment

Audit readiness

SOC coordination

Education

CISSP

CGRC

CEH

Tools

CSAM

ServiceNow

Splunk

Vulnerability scanners

Job description

Purpose

Carry continuous monitoring, incident response coordination, and audit and assessment support; serve as second-line backup to the Lead ISSO.

Reports to: Lead ISSO for task direction.

Core responsibilities

• Execute continuous monitoring and security posture management, producing outputs that support Government risk decisions, audit readiness, and ongoing authorization.
• Coordinate incident response with the DFC SOC, meeting the acknowledgement and notification timeframes in the PWS, and maintain incident documentation and after-action records.
• Support audits and assessments: maintain audit-ready evidence, sustain traceability between requirements and artifacts, reduce evidence-collection burden on Government staff, and identify documentation gaps before assessors do.
• Support vulnerability analysis and POA&M lifecycle activities in coordination with remediation teams, recognizing that closure approval, schedule extensions, and risk acceptance are reserved to Government officials.
• Maintain proficiency in CSAM, ServiceNow, Splunk, and the vulnerability scanning platforms in use.

Required qualifications

• Ten or more years of federal cybersecurity experience.
• Hands-on authorization package development and security control assessment.
• Operational experience with a federal GRC platform and an enterprise SIEM.
• Demonstrated coordination with an agency security operations center during live incidents.
• Active CISSP.

Preferred

• CGRC or CEH.
• Direct CSAM experience.
• Prior support to a federal civilian CISO organization.
• Existing federal background investigation eligible for reciprocity under PWS 5.4.