Senior ISSO: Cloud Security & RMF Lead

Guidehouse; Springfield (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

401(k) retirement plan

Tuition reimbursement

Mobility stipend

Job summary

Guidehouse is seeking an Information Security Systems Officer (ISSO) – Senior Consultant to lead RMF, ATO and continuous monitoring for a major federal initiative. You will guide engineers, system owners, and security teams through secure cloud architectures across AWS/Azure and hybrid environments.

The ideal candidate has 5+ years in cybersecurity/secure systems engineering, an active TS/SCI with poly, and strong experience with NIST RMF, SIEM (Splunk), vulnerability scanning, and DevSecOps

Qualifications

• Bachelor’s degree from an accredited university.
• Minimum of FIVE (5) years of work experience in cybersecurity or secure systems engineering experience, including cloud architecture.
• An ACTIVE and MAINTAINED TS/SCI Poly Federal or DoD security clearance with a (COUNTERINTELLIGENCE (CI) polygraph – OR – FULL SCOPE (FS/FSP) polygraph).
• US Citizenship is contractually required.
• Strong understanding of security frameworks and compliance standards (e.g., NIST, RMF SP 800-53 Rev 5, DoD 8570).
• Proven experience in designing and implementing enterprise security tools such as SIEM (e.g., Splunk), vulnerability scanners (e.g., Nessus), and endpoint protection platforms (e.g., Crowdstrike).
• Demonstrated ability to lead cross-functional teams and complex technical projects.
• Strong analytical and problem-solving skills.
• Excellent communication skills with the ability to convey technical concepts to non-technical stakeholders.

Responsibilities

• Lead design and engineering of secure cloud architectures across AWS, Azure, and hybrid environments.
• Implement and validate NIST 800-53 security controls and cloud-native security services (IAM, encryption, segmentation, logging).
• Conduct cloud threat modeling, risk assessments, and architecture reviews.
• Oversee cloud configuration baselines using STIGs, CIS Benchmarks, and SCAP.
• Drive cloud vulnerability and compliance efforts using ACAS/Nessus and cloud-security posture tools.
• Support RMF engineering activities including boundary definition, inheritance documentation, and authorization packages.
• Integrate cloud-security capabilities such as Sentinel, Splunk, and SIEM logging pipelines.
• Guide DevSecOps teams on secure CI/CD, container security, and infrastructure-as-code validation.
• Produce cloud architecture diagrams, design documentation, and engineering artifacts.
• Mentor junior and mid‑level ISSEs and act as a technical escalation point for cloud engineering issues.

Skills

Security frameworks

RMF guidance

Cloud security

SIEM (Splunk)

Cross-functional leadership

Communication skills

Education

Bachelor’s degree

Master’s degree

Tools

Splunk

Nessus

ACAS

Cloud platforms (AWS/Azure)

Job description

Guidehouse is seeking an Information Security Systems Officer (ISSO) – Senior Consultant to lead RMF, ATO and continuous monitoring for a major federal initiative. You will guide engineers, system owners, and security teams through secure cloud architectures across AWS/Azure and hybrid environments.

The ideal candidate has 5+ years in cybersecurity/secure systems engineering, an active TS/SCI with poly, and strong experience with NIST RMF, SIEM (Splunk), vulnerability scanning, and DevSecOps