TS/SCI ISSO – Cross‑Domain & Cloud Security Lead

Jimmy Jazz; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. This ISSO role owns the security posture for DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted environments, in accordance with ICD 503 and DHS 4300C.

On-site in a Government SCIF in Washington, DC. Responsibilities include creating and maintaining ATO packages, performing RMF

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' IT/cybersecurity experience.
• Minimum of 3 years' experience as an ISSO or RMF package owner.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS polygraph.
• Knowledge of RMF, NIST SP 800-37, NIST SP 800-53, and ICD 503.
• Knowledge of cross-domain solution governance and related mandates.
• Experience with hybrid classified/unclassified, on-premise and cloud environments, DevSecOps, and agile.

Responsibilities

• Create and maintain ATO packages for assigned systems in the GRC tool and monitor their compliance.
• Perform self-assessments of on-premise and cloud systems against the A&A SOP.
• Manage POA&Ms, waivers, and risk exceptions; provide weekly or bi-weekly activity reports.
• Perform audit log reviews weekly; respond to NOSC alerts and ensure periodic scanning.
• Coordinate system changes through IATT requests and serve on the CM Board when designated.
• Facilitate annual contingency plan tests and submit quarterly CPEM reporting.
• Deliver ISSO reports (incident response, POA&M, ConMon metrics) to ISSMs and system owners.
• Serve as SCIF ISCR and mentor junior ISSOs.

Skills

RMF expertise

NIST SP 800-53

Cross Domain Solutions

Cloud security

Windows/Linux security

Communication skills

Education

BS degree in IT or Cybersecurity

Tools

RSA Archer

eMASS

Job description

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. This ISSO role owns the security posture for DHS Intelligence Enterprise systems, including Cross Domain Solutions and cloud-hosted environments, in accordance with ICD 503 and DHS 4300C.

On-site in a Government SCIF in Washington, DC. Responsibilities include creating and maintaining ATO packages, performing RMF