Senior RMF/ISSO – DoD Cybersecurity & Compliance Expert

ASRC Federal; White Sands (NM); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k)

Education assistance

Paid time off

Job summary

ASRC Federal is seeking an Information System Security Officer with an active Secret clearance to support DEVCOM-CBC TDAC at White Sands NM. You will oversee RMF activities, maintain ATOs, and coordinate with stakeholders across unclassified and classified systems.

Responsibilities include developing system artifacts, managing POA&Ms, coordinating vulnerability scans, and ensuring compliance with DoD regulations. Strong communication is essential for both technical and non-technical audiences.

Qualifications

• RMF EMASS Authorization duties required.
• Working knowledge of DoD/Army cybersecurity regulations.
• Experience with Active Directory and STIG/SRG audit processes.

Responsibilities

• Maintain current ATO status for DEVCOM systems and provide RMF guidance.
• Develop and modify system artifacts and ensure controls in eMASS.
• Import vulnerability scans and compliance checkers such as STIGs and Nessus/ACAS.
• Track and report IAVAs and manage POA&M.
• Operate eMASS network packages and maintain authorization documentation.
• Coordinate incident response and vulnerability management activities.

Skills

RMF EMASS

DoD/Army cybersecurity regulations

Active Directory management

Vulnerability management

Communication skills

Education

Bachelor’s degree or 5+ years in related field

Tools

eMASS

Nessus/ACAS

STIG/SRG tools

PKI/Enhanced Trusted Agent familiarity

Job description

ASRC Federal is seeking an Information System Security Officer with an active Secret clearance to support DEVCOM-CBC TDAC at White Sands NM. You will oversee RMF activities, maintain ATOs, and coordinate with stakeholders across unclassified and classified systems.

Responsibilities include developing system artifacts, managing POA&Ms, coordinating vulnerability scans, and ensuring compliance with DoD regulations. Strong communication is essential for both technical and non-technical audiences.