Senior ISSO — RMF & Federal Security Leader (DC Onsite)

Steampunk; Bloomington (IL); On-site; USD 90,000 - 140,000; Full time

Job summary

Steampunk is seeking a Senior Information Systems Security Officer (ISSO) to support a government client on site in Washington, D.C. The role focuses on maintaining security posture per RMF, NIST SP 800-53, and DHS guidance across the ATO lifecycle, with emphasis on proactive risk management and incident response.

The incumbent will drive POA&M updates, coordinate with Privacy and Governance teams, and lead Security IPTs while leveraging SIEM, GRC tools, and Jira for tracking and reporting.

Qualifications

• Requires Masters with 4+ years cyber & FISMA experience, or Bachelors with 5+ years, or no degree with 9 years in cyber & FISMA.
• CISSP/CASP/CISM/CEH/CISA/SSCP/GISP/GSLC or equivalent security certs preferred.
• Ability to obtain DHS Public Trust.
• Experience with NIST SP 800-53 and RMF.

Responsibilities

• Maintain RMF and system security posture per applicable standards.
• Deliver responsive security support to stakeholders across the ATO lifecycle.
• Review and maintain system security artifacts and documentation.
• Lead DevSecOps integration and security testing within SDLC.

Skills

RMF

NIST 800-53

FISMA

DevSecOps

Vulnerability assessment

IA concepts

Communication skills

Senior ISSO duties

Education

Master's degree in cyber / information security

Bachelor's degree in cyber / information security

No degree with 9 years cyber/FISMA

Tools

SIEM

GRC tools

Jira

Job description

Steampunk is seeking a Senior Information Systems Security Officer (ISSO) to support a government client on site in Washington, D.C. The role focuses on maintaining security posture per RMF, NIST SP 800-53, and DHS guidance across the ATO lifecycle, with emphasis on proactive risk management and incident response.

The incumbent will drive POA&M updates, coordinate with Privacy and Governance teams, and lead Security IPTs while leveraging SIEM, GRC tools, and Jira for tracking and reporting.