Senior ISSO – RMF, FedRAMP & Cloud Security

AnaVation, LLC; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

401k plan with match

Paid leave and holidays

Tuition reimbursement

Life and AD&D Insurance

Job summary

AnaVation is seeking a Sr. Security Specialist (ISSO) for our mission critical customer in Washington, DC. You will work as part of a fantastic team delivering security expertise on high priority projects.

Daily duties include, but are not limited to risk assessments, SA&A packages, and ATO development across multi-cloud and on‑prem environments. Required qualifications include 6+ years with NIST, FISMA, and RMF, FedRAMP and cloud experience (Azure, AWS, OCI), and CISSP certification.

Qualifications

• 6+ years' experience with NIST, FISMA, and Security Assessment & Authorization.
• FedRAMP and Cloud experience (e.g., Azure, AWS, OCI).
• Knowledgeable on NIST SP 800-53r5/53A/800-18r1 and RMF.
• Ability to obtain and maintain a customer Public Trust clearance; CISSP required.

Responsibilities

• Serve as a senior security advisor for risk assessment programs and audits.
• Develop SA&A packages and maintain SSPs with supporting docs.
• Coordinate incident response and contingency planning and training.
• Evaluate cloud and on‑premise environments, provide remediation guidance.
• Present security posture updates to leadership and stakeholders.

Skills

NIST RMF knowledge

FedRAMP & Cloud experience

CISSP certified

Tools

JCAM CSAM

eMASS

Nessus

BigFix / SCCM / ePO

Job description

AnaVation is seeking a Sr. Security Specialist (ISSO) for our mission critical customer in Washington, DC. You will work as part of a fantastic team delivering security expertise on high priority projects.

Daily duties include, but are not limited to risk assessments, SA&A packages, and ATO development across multi-cloud and on‑prem environments. Required qualifications include 6+ years with NIST, FISMA, and RMF, FedRAMP and cloud experience (Azure, AWS, OCI), and CISSP certification.