Sr. Security Specialist (ISSO) (USC)

Connexions; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Connexions is seeking a Sr. Security Specialist (ISSO) to join our team in Washington, DC onsite. This full-time role requires active TS/SCI clearance and hands-on RMF experience.

You will interact with SMEs and government stakeholders, manage POA&Ms, and help maintain security documentation across A&A tools to ensure authorized systems and compliant risk management. The position emphasizes DevSecOps integration, contingency planning, vulnerability management, and rigorous audit log and access

Qualifications

• Experience with RMF-based security authorization processes.
• Ability to interact with government stakeholders and SMEs.
• Knowledge of cyber risk management and policy implementation.

Responsibilities

• Interact with SMEs and government stakeholders while supporting junior ISSOs.
• Manage and support POA&M creation, monitoring, and status updates.
• Support Waivers and Risk Acceptance Memos for risk management.
• Review and update security authorization documentation in A&A tools.
• Support contingency plan testing and updates.
• Support system self-assessments under Ongoing Authorization.
• Monitor ISVM and Patch Management activities.
• Maintain inventory knowledge within accreditation boundary.
• Assist A&A planning for assigned information systems.
• Ensure configuration management and participate in CCBs.
• Respond to evolving cybersecurity requirements.
• Participate in DevSecOps implementing security in Agile processes.
• Manage ISSO checklist responsibilities including logs and access control.
• Demonstrate strong RMF process experience.
• Perform ad hoc duties as assigned by ISSM.

Skills

Cyber Assessment

Cyber Governance and Policies

Cyber Security

Cyber Strategy

NIST RMF

Education

Bachelor's degree in Information Systems / Computer Science / Engineering / MIS

Job description

Title: Sr. Security Specialist (ISSO)

Duration: Full Time Hire

Start: Oct 2026

Location: Washington, DC (Onsite)

Type: W2

• Active TS/SCI Required***

Required Skills:

• Cyber Assessment Intermediate
• Cyber Governance and Policies Intermediate
• Cyber Security Intermediate
• Cyber Strategy Intermediate
• NIST Risk Management Framework (RMF) Intermediate

Day-to-Day Responsibilities:

• Interact with key Subject Matter Experts (SMEs) and Government Stakeholders while supporting junior ISSOs.
• Manage and support the creation, monitoring, and status updates of POA&Ms to ensure weaknesses are resolved according to scheduled completion dates.
• Support the creation of Waivers and Risk Acceptance Memos to assist in effective system risk management.
• Manage and support the review, creation, and annual update of security authorization documentation within government A&A tools.
• Support annual Contingency Plan testing activities and updates to contingency plans.
• Support system self-assessments as part of the Ongoing Authorization program.
• Monitor and respond to Information Security Vulnerability Management (ISVM) and Patch Management activities.
• Maintain and manage inventory knowledge within the accreditation boundary.
• Support Assessment and Authorization (A&A) planning activities for assigned information systems.
• Ensure Configuration Management processes are followed to prevent the introduction of new security risks and participate in Change Control Boards (CCBs).
• Respond to current and emerging cybersecurity requirements.
• Participate in DevSecOps activities, integrating security into Agile development processes for assigned systems.
• Manage and support ISSO checklist responsibilities, including classified spill cleanup, audit log reviews, and maintenance of privileged user and physical access lists.
• Demonstrate strong experience with the RMF process.
• Perform ad hoc duties as assigned by the ISSM.

Expected Deliverables:

• ATO (Authorization to Operate) documentation for systems undergoing the authorization process.

Education Requirements:

• Bachelor s degree from an accredited university in Information Systems, Computer Science, Engineering, Management Information Systems, or a related technical field.