Senior ISSO for DoD IL5/IL6 Cloud Security | Fort Meade

ecsfederal; Maryland; On-site; USD 150,000 - 170,000; Full time

Job summary

Everforth ECS is seeking an Information System Security Officer (ISSO) to support IL5 and IL6 programs in an operational DoW environment housed in Fort Meade, MD. The role demands hands-on ISSO experience, RMF knowledge, and strong security artifact management across multiple enclaves in Azure.

The ideal candidate will develop ATO artifacts, coordinate with engineers and government stakeholders, and manage ACAS/Nessus, Trellix, and eMASS tools to prepare vulnerability reports and POA&Ms.

Qualifications

• ISSO experience with RMF and NIST 800-53 controls is required.
• Ability to develop and maintain ATO artifacts and continuous monitoring documentation.
• Experience with vulnerability management tools (ACAS/Nessus) and Trellix endpoint security.
• Experience translating technical findings into actionable risk statements for leadership.

Responsibilities

• Support ISSO activities for a DoD Azure environment, RMF, ATO maintenance, continuous monitoring, and compliance documentation.
• Develop and maintain ATO artifacts, security plans, control evidence, vulnerability reports, diagrams, inventories, and risk documentation.
• Review ACAS/Nessus results and prepare vulnerability reports, metrics, and POA&Ms updates.

Skills

ISSO experience

Cybersecurity judgement

Stakeholder communication

Cloud security knowledge

Education

Active DoD 8140 IAT Level II Security+ (or higher)

Tools

ACAS/Nessus

Trellix / ESS

eMASS

Microsoft Sentinel

Azure Defender / Defender for Cloud

Job description

Everforth ECS is seeking an Information System Security Officer (ISSO) to support IL5 and IL6 programs in an operational DoW environment housed in Fort Meade, MD. The role demands hands-on ISSO experience, RMF knowledge, and strong security artifact management across multiple enclaves in Azure.

The ideal candidate will develop ATO artifacts, coordinate with engineers and government stakeholders, and manage ACAS/Nessus, Trellix, and eMASS tools to prepare vulnerability reports and POA&Ms.