Information Systems Security Officer (ISSO)

The Information Systems Security Officer will play a key role in strengthening cybersecurity and maintaining the security posture of cloud-based platforms supporting U.S. government and defense environments. This position focuses on executing the Department of Defense Risk Management Framework (DoD RMF) lifecycle and maintaining system authorizations across IL4 and IL5 environments. The successful candidate will oversee authorization packages, continuous monitoring activities, vulnerability remediation, and compliance documentation to ensure systems remain secure and audit-ready. Working closely with Information System Security Managers, assessors, Authorizing Officials, and Product and Engineering teams, this professional will translate complex security requirements into practical technical guidance. The role offers an opportunity to contribute to mission-critical security operations while supporting modern cloud-native technologies and DevSecOps practices. This is a full-time, fully remote position, open only to candidates residing in the approved hiring hubs of Washington, DC/Maryland/Virginia or Denver/Colorado Springs, Colorado.

• 3–5 years of hands-on experience in DoD cybersecurity, RMF authorization, or information assurance, including direct experience in an ISSO or equivalent compliance role supporting DoD Authority to Operate (ATO) packages.

• Demonstrated proficiency building, managing, and maintaining authorization packages in eMASS.

• Working knowledge of DISA PPSM registration processes, including ports, protocols, services, CAL, and system boundary and data-flow documentation.

• Strong practical understanding of NIST SP 800-53 (Revision 4 or 5), NIST SP 800-37 RMF, and DoD-specific cybersecurity implementation guidance.

• Familiarity with DoD security tools, standards, and authorization policies, including DISA STIGs, STIG Viewer, SCC, ACAS, IAVM, DISA Cloud Computing Security Requirements Guide, and continuous monitoring requirements.

• Understanding of modern cloud environments and architectures, particularly AWS, containers, Kubernetes, and CI/CD pipelines, and the ability to map these technologies to technical security controls.

• Strong technical writing skills, with the ability to produce clear, accurate, assessor-ready documentation and control implementation narratives.

• Active U.S. Secret security clearance.

• DoD 8570/8140 IAM Level I or IAT Level II baseline certification, such as Security+, CISSP, or an equivalent qualification, required or obtainable within 90 days.

• U.S. citizenship is mandatory for this position.

• Must reside in one of the approved hiring locations: Washington, DC/Maryland/Virginia or Denver/Colorado Springs, Colorado.

• A proactive, solutions-oriented mindset, with the ability to take ownership, overcome challenges, and deliver measurable results.

• Strong collaboration skills, personal accountability, autonomy, and the ability to work effectively across technical and security teams.