Senior ISSO — Classified RMF & Compliance (Arlington)

VulnU; Arlington (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Learning budget

Flexible PTO

Retirement match

Job summary

Two Six Technologies is seeking an Information System Security Officer (ISSO) to join our Corporate Information Security team in Arlington, VA. You will assist the ISSM to ensure compliance for assigned classified programs, plan RMF activities, and prepare ATO packages using eMASS and Xacta.

The ideal candidate has a BS in a related field, 3+ years in classified environments, and DoD 8140 certifications (Security+, CISSP, etc.) or ability to obtain within 6 months.

Qualifications

• Bachelor's degree in a related field; 3+ years in classified environments.
• Active DoD 8140 certifications such as Security+, GCISP, GSEC, SSCP, CASP+, CISM, CISSP or ability to obtain within 6 months.
• Experience with RMF Steps 1-7 and ATO lifecycle processes.
• Ability to work onsite daily at the Arlington headquarters with occasional travel.

Responsibilities

• Ensure classified information systems remain in or achieve RMF compliance.
• Scope program requirements, propose pathways, and draft ATO packages.
• Complete STIG checklists and track POA&Ms.
• Review security logs, networks, data transfers, and systems for anomalies.
• Assist in remediation of security incidents and audits for assigned systems.
• Support Change Management and Insider Threat activities.

Skills

RMF knowledge

Communication skills

Work independently

Education

Bachelor's degree in a related field

Tools

Jira

eMASS

Xacta

Job description

Two Six Technologies is seeking an Information System Security Officer (ISSO) to join our Corporate Information Security team in Arlington, VA. You will assist the ISSM to ensure compliance for assigned classified programs, plan RMF activities, and prepare ATO packages using eMASS and Xacta.

The ideal candidate has a BS in a related field, 3+ years in classified environments, and DoD 8140 certifications (Security+, CISSP, etc.) or ability to obtain within 6 months.