Senior ISSO – RMF, Cloud Security & ATO Expert

Socket.dev; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical insurance (employee & depend.)

Dental insurance (company paid)

Vision insurance (company paid)

401k with match

Paid leave & holidays

Tuition & training reimbursement

Job summary

AnaVation is seeking a Sr. Security Specialist (ISSO) for our mission-critical customer in Washington, DC. You will join a high-performing team delivering security expertise on top-priority projects, including risk assessments, SA&A, and ATO documentation.

Responsibilities include risk assessments, RMF control assessments, and incident response planning across multi-cloud and on-premise environments. Strong communication and C‑level reporting are essential.

Qualifications

• 6+ years’ experience with NIST, FISMA, and Security Assessment & Authorization.
• FedRAMP and Cloud experience (e.g., Azure, AWS, Oracle OCI).
• In-depth knowledge of NIST SP 800-53r5, SP 800-53A, SP 800-18r1, etc.
• Strong RMF expertise and ability to obtain a Public Trust clearance (sponsorship possible).
• CISSP certification is required.

Responsibilities

• Lead risk assessments and internal audits within a multi-cloud/on-premise environment.
• Develop and maintain SA&A packages and SSPs for Authority to Operate (ATO).
• Coordinate Incident Response Plans and Contingency Plans with stakeholders.
• Review vulnerability data and recommend remediation.
• Provide C‑level presentation and reporting on security posture.
• Support security compliance activities and audit liaison tasks.

Skills

NIST RMF

CISSP

FedRAMP & Cloud

Risk assessment

Security governance

Security interviews & reporting

Communication skills

Cloud & on-prem security

Incident response planning

Vulnerability management

Data analysis (Excel/PowerBI)

Tools

eMASS

JCAM CSAM

Nessus

BigFix

SCCM

ePO

IT security tooling

DLP software

Job description

AnaVation is seeking a Sr. Security Specialist (ISSO) for our mission-critical customer in Washington, DC. You will join a high-performing team delivering security expertise on top-priority projects, including risk assessments, SA&A, and ATO documentation.

Responsibilities include risk assessments, RMF control assessments, and incident response planning across multi-cloud and on-premise environments. Strong communication and C‑level reporting are essential.