Senior ISSO & RMF Analyst – SOCOM IT Security (MacDill)

Peraton; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Peraton seeks an Information Systems Security Officer to support SOCOM SITEC-3 at MacDill AFB, Tampa, FL, with active DoW TS/SCI clearance. This role focuses on RMF lifecycle activities, continuous monitoring, vulnerability management, and SA&A artifacts.

You will work with IT risk assessment teams, interview SMEs, review security plans and configurations, and develop robust remediation plans for US government systems, ensuring compliance with NIST and DoD guidance.

Qualifications

• Active DoW TS/SCI clearance required.
• Extensive IT risk management and cybersecurity experience.
• Familiarity with RMF, NIST 800-53, and federal standards.
• Experience developing and auditing SA&A artifacts.
• Strong communication with SMEs and leadership.

Responsibilities

• Work with IT risk assessment team to perform risk and control assessments.
• Interview stakeholders and SMEs including system and database admins.
• Review artifacts like security plans, SOPs, and system configurations.
• Evaluate IT controls design and operation using artifacts and guidance.
• Document test results to enable repeatability and auditability.
• Support RMF lifecycle activities, continuous monitoring, and remediation plans.
• Prepare and present assessment results to senior leadership.
• Implement continuous monitoring programs to maintain security.
• Proficient with eMASS and DoD cybersecurity tools.

Skills

IT risk management

Information security

Cybersecurity

RMF lifecycle

Stakeholder communication

Education

HS Diploma

AS/AA degree

BS/BA degree

MS/MA degree

PhD

Tools

eMASS

STIG Viewer

Excel

Word

PowerPoint

Job description

Peraton seeks an Information Systems Security Officer to support SOCOM SITEC-3 at MacDill AFB, Tampa, FL, with active DoW TS/SCI clearance. This role focuses on RMF lifecycle activities, continuous monitoring, vulnerability management, and SA&A artifacts.

You will work with IT risk assessment teams, interview SMEs, review security plans and configurations, and develop robust remediation plans for US government systems, ensuring compliance with NIST and DoD guidance.