Cybersecurity Specialist (ISSO)

ASRC Federal•Washington, DC

15h•$142,078 - $241,558•Hybrid

About The Position

ASRC Federal Agile Decision Sciences LLC is seeking an Information System Security Officer (ISSO) / Cybersecurity Specialist to support mission-critical federal systems for NASA’s Space Communications and Navigation (SCaN) program. The role manages cybersecurity governance, risk management, and compliance across a multi-system portfolio and hybrid and cloud-hosted environments. The specialist oversees continuous monitoring and federal Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATOs), using the NIST Risk Management Framework and applicable federal cybersecurity requirements. The position is hybrid, based in Washington, DC or Greenbelt, MD. It works with Authorizing Officials, System Owners, engineering teams, and program leadership to align security compliance with mission objectives. Occasional travel may be required. U.S. citizenship is required, along with the ability to obtain and maintain a Secret clearance.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
At least 6 years of direct experience supporting cybersecurity governance, risk management, and compliance (GRC) or ISSO duties for federal information systems.
Strong working knowledge of NIST SP 800-53 Rev. 5, NIST RMF (SP 800-37), FISMA, and federal cybersecurity compliance standards.
Experience creating, maintaining, and assessing authorization packages, including SSPs, POA&Ms, RBDs, and SARs, and executing continuous monitoring strategies.
Experience evaluating vulnerability scan outputs, identifying vulnerabilities, and driving technical remediation across cross-functional teams.
Familiarity with cloud security concepts, AWS environments, and the shared responsibility model.
Strong technical writing, analytical, and stakeholder coordination skills, including experience managing multiple competing security packages simultaneously.
U.S. citizenship.
Ability to obtain and maintain a Secret clearance.

Nice To Haves

Prior experience supporting NASA cybersecurity policies, processes, and tools, including hands-on experience with RISCS.
Familiarity with NASA Space Communications and Navigation operations, mission communications, or ground infrastructure.
Active cybersecurity certification, such as CISSP, CISM, CAP/CGRC, Security+, or AWS Certified Security.
Practical experience establishing and reviewing Interconnection Security Agreements and onboarding customer systems.
Knowledge of Zero Trust Architecture principles, ICAM, network segmentation, and secure interconnectivity.

Responsibilities

Serve as the dedicated ISSO for a multi-system portfolio, managing continuous monitoring, assessment preparation, and A&A lifecycles to achieve and maintain ATOs.
Develop, update, and maintain System Security Plans, Risk Assessment Reports, Contingency Plans, PIA/PTAs, system architecture and network diagrams, and other authorization artifacts in RISCS.
Manage and track POA&Ms and Risk-Based Decisions through remediation and closure.
Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation with engineering, SOC, and systems administration teams.
Coordinate and conduct annual security control assessments, self-assessments, gap analyses, and contingency plan testing and training.
Prepare and support ATO briefings, Change Control Board reviews, and security impact analyses for system modifications.
Draft, review, and maintain interconnection documentation, including ISAs, MOUs, and MOAs, for external and cross-system onboarding.
Transition legacy on-premises control implementations to cloud-native AWS environments and validate cloud security tools and shared responsibility models.
Collaborate with Authorizing Officials, System Owners, engineering teams, and program leadership to align security compliance with operational mission objectives.