Senior ISSO - Cloud, DevSecOps & Compliance (Remote)

Chenega MIOS; Washington (District of Columbia); Remote; USD 120,000 - 150,000; Full time

Job summary

Chenega MIOS is seeking an Information System Security Officer (ISSO) to lead security, compliance, and continuous protection of the GSAFleet.gov environment, with remote work options.

You will plan, implement, assess, and monitor security controls across development and operations, coordinate secure design in CI/CD, and produce POA&Ms and ATO materials. The role requires a Bachelor's degree and 10 years of security experience; teleworking is permitted.

Qualifications

• 10 years of developing, implementing, and managing security controls for large-scale information systems.
• Experience applying NIST RMF requirements and processes.
• Experience operating in a DevSecOps environment.

Responsibilities

• Plan, implement, assess, and monitor GSAFleet.gov security controls throughout development and operations.
• Coordinate secure design, access control, vulnerability scanning, remediation, and security checks in CI/CD workflows.
• Develop and maintain security-plan inputs, control implementation evidence, assessment materials, POA&Ms, and authorization-package documentation necessary to support and maintain the GSAFleet.gov ATO.
• Review application, infrastructure, data, and interface changes for security and privacy impact.
• Support security incidents, audits, continuous monitoring, and ATO maintenance; advise teams on corrective actions.
• Respond to and coordinate resolution of information-security incidents, breaches, and other security events affecting GSAFleet.gov.
• Coordinate security deliverables and ensure vulnerabilities within the contractor scope are addressed.
• Other duties as assigned

Skills

FISMA compliance

NIST RMF

DevSecOps

Cloud & on-prem architecture

Security documentation

Incident response

Education

Bachelor's degree in a related field

Job description

Chenega MIOS is seeking an Information System Security Officer (ISSO) to lead security, compliance, and continuous protection of the GSAFleet.gov environment, with remote work options.

You will plan, implement, assess, and monitor security controls across development and operations, coordinate secure design in CI/CD, and produce POA&Ms and ATO materials. The role requires a Bachelor's degree and 10 years of security experience; teleworking is permitted.