Senior ISSO — DoD RMF Expert with TS/SCI

APOGEE RESEARCH LLC; Virginia (MN); On-site; USD 110,000 - 170,000; Full time

Job summary

Apogee Research seeks an experienced Information Systems Security Officer (ISSO) for its Arlington, VA office. The ISSO will protect and manage security for government-grade systems in a multi-level DoD environment, reporting to the Director of Operations and collaborating with CPSO/FSO, PMs, and the government customer.

You will develop RMF packages, maintain SSPs and security artifacts, perform audits, coordinate certifications, and lead cyber awareness and incident response activities in a

Qualifications

• 3-5 years as an ISSO or ISSE.
• Must hold and maintain DoD 8140/8570 baseline certification (e.g., Security+, CySA+, etc.)
• Experience auditing information systems.
• Experience with certification/authorization requirements as outlined in the NISPOM, RMF JSIG, ICD 503, NIST SP 800-53 Rev 4/5, NIST SP 800-171, DoD STIG Overlays, and other USG IS/Security-related policies.
• Self-starter, highly motivated, able to multi-task and meet tight deadlines.

Responsibilities

• Ensure security policies and DoD regulations are followed across systems.
• Maintain SSPs, SCTM, Risk Assessments, and authorizations; support system risk management.
• Develop RMF packages with evidence for system authorization in coordination with PMs, ISSM, and government customers.
• Support assessments of classified and CUIN networks.
• Perform compliance and vulnerability scans and assist with secure file transfers.

Skills

RMF knowledge

SSP documentation

Security+ or CySA+

Audit experience

DoD information security

Education

DoD 8140/8570 baseline certs

Tools

SCTM

Job description

Apogee Research seeks an experienced Information Systems Security Officer (ISSO) for its Arlington, VA office. The ISSO will protect and manage security for government-grade systems in a multi-level DoD environment, reporting to the Director of Operations and collaborating with CPSO/FSO, PMs, and the government customer.

You will develop RMF packages, maintain SSPs and security artifacts, perform audits, coordinate certifications, and lead cyber awareness and incident response activities in a