Senior ISSO: RMF & Cyber Defense Lead

International Executive Service Corps; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

International Executive Service Corps seeks an Information System Security Officer III (ISSO III) in San Diego, CA to lead day-to-day RMF and security control activities for a Navy contract. You will coordinate with ISSM, system engineers, and admins to implement and monitor protective measures and continuous monitoring.

The role requires active TS/SCI clearance, six years' experience in vulnerability analysis and RMF, and hands-on use of ACAS/Nessus, Splunk, STIG Viewer, and eMASS.

Qualifications

• Active TS/SCI clearance and U.S. citizenship.
• Bachelor's degree in IT/Cybersecurity/CS or related field; substantial operational experience may substitute for degree.
• At least 6 years coordinating security changes, vulnerability analysis, and continuous monitoring.
• Hands-on experience with ACAS, HBSS, Splunk, and STIG Viewer.
• DoD 8140/8570 IAM Level II certification required (CAP/CASP+ CE, CISM, CISSP, etc.).
• Strong Windows and Linux security configuration knowledge; AD policy experience.
• Ability to manage RMF deadlines in a fast-paced environment.

Responsibilities

• Execute daily/weekly/monthly cybersecurity operations for assigned networks and systems.
• Coordinate with system engineers, developers, and administrators to enforce security configurations.
• Perform vulnerability assessments using ACAS/Nessus and analyze results.
• Apply STIGs using SCC and STIG Viewer tools.
• Prepare and upload artifacts into eMASS for NIST 800-53 controls.
• Draft RMF documents: ISCP, IRP, inventories; manage POA&Ms.

Skills

ACAS/Nessus

HBSS

Splunk

STIG Viewer

AD/Windows security

Linux security

RMF/CSM

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

eMASS

SCAP/SCAP Checker (SCC)

Job description

International Executive Service Corps seeks an Information System Security Officer III (ISSO III) in San Diego, CA to lead day-to-day RMF and security control activities for a Navy contract. You will coordinate with ISSM, system engineers, and admins to implement and monitor protective measures and continuous monitoring.

The role requires active TS/SCI clearance, six years' experience in vulnerability analysis and RMF, and hands-on use of ACAS/Nessus, Splunk, STIG Viewer, and eMASS.