(781) Cybersecurity Technical Specialist Level III / ISSO

Arlo Solutions LLC•Aberdeen, MD

10d•Onsite

About The Position

Arlo Solutions seeks an experienced Cybersecurity Technical Specialist III / ISSO to support U.S. Army ATEC cybersecurity operations at Aberdeen Proving Ground, Maryland. This is a full-time, on-site position. The employee must live within commuting distance or be willing to relocate at their own expense before employment, and must hold an active Secret clearance. The role provides technical support for DoD Risk Management Framework (RMF) activities, security-control analysis, vulnerability management, eMASS authorization packages, POA&M management, and Continuous Monitoring. The specialist reviews system configurations, control implementations, technical evidence, assessment findings, and cybersecurity documentation; validates findings and remediation; and prepares accurate, traceable, technically defensible deliverables and briefings. Work is performed under established RMF leadership and Government authorization processes. The position does not confer independent managerial, ISSM, security control assessor, or Authorizing Official authority. The successful candidate will collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders; communicate status, obstacles, risks, and recommendations; and follow established escalation procedures and authorized operational direction. Professional conduct, technical accuracy, accountability, policy compliance, and continuous support of the U.S. Army ATEC mission are expected.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Engineering, or a related field; equivalent experience may qualify when permitted by contract.
Demonstrated experience supporting DoD, U.S. Army, or federal cybersecurity programs.
Hands-on experience performing ISSO, RMF, information assurance, or equivalent cybersecurity responsibilities.
Strong understanding of NIST SP 800-53 security controls, RMF processes, cybersecurity compliance, and authorization requirements.
Experience reviewing security-control implementations, technical evidence, vulnerability findings, and cybersecurity documentation.
Experience supporting authorization packages, POA&Ms, and Continuous Monitoring.
Ability to independently analyze technical cybersecurity issues, validate findings, and produce accurate, defensible deliverables.
Strong analytical, organizational, documentation, communication, and problem-solving skills.
Applicable knowledge and practical experience with DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable DoD and Army cybersecurity requirements.
Experience with eMASS authorization-package maintenance, security-control documentation, implementation statements, assessment evidence, findings, and workflow support.
Experience with ACAS assessments, DISA STIG compliance, SCAP scanning, technical findings analysis, and remediation validation.
Experience with POA&M documentation, remediation tracking, milestone management, risk-acceptance support, and evidence validation.
Experience with Continuous Monitoring, recurring security reviews, vulnerability tracking, cybersecurity posture assessment, and compliance reporting.
Knowledge of security-control implementation validation, technical risk assessments, compliance evaluation, and corrective-action recommendations.
Knowledge of Windows, Linux, networking, system configurations, and enterprise cybersecurity concepts.
Ability to produce accurate cybersecurity reports, RMF artifacts, quality-assurance reviews, and technical briefings.
Must satisfy applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role, proficiency level, and contract.
Must possess an active Secret clearance and maintain eligibility throughout employment.
Must meet applicable U.S. citizenship requirements established by the contract.
Must satisfy Aberdeen Proving Ground installation access, identity verification, and credentialing requirements; complete required Government cybersecurity awareness, acceptable-use, and security training; and maintain authorized access eligibility.
Must reside within commuting distance of Aberdeen Proving Ground, Maryland, or be willing to self-relocate.
Must work full-time on-site at the assigned Government installation.
Must demonstrate professional conduct, accountability, effective teamwork, and adherence to established operational direction.
Must independently validate technical work for accuracy, completeness, and compliance before submission.

Nice To Haves

Relevant certifications such as CompTIA Security+, CySA+, CASP+/SecurityX, CISSP, or other recognized qualifications.
Additional operating-system, networking, vendor-specific, and cybersecurity certifications.
Previous experience supporting U.S. Army, ATEC, NETCOM, or other DoD cybersecurity programs.
Experience supporting enterprise information systems, network infrastructure, or mission-critical Government environments.
Demonstrated ability to interpret and apply DISA STIG requirements and technical vulnerability assessment results.
Experience supporting cybersecurity authorization or reauthorization efforts.
Experience coordinating technical remediation activities with System Administrators and system engineering teams.
Experience supporting Government inspections, cybersecurity assessments, or technical compliance reviews.
Familiarity with enterprise vulnerability tracking, reporting dashboards, Microsoft Excel, Microsoft Lists, and other approved cybersecurity management tools.
Experience developing technically defensible risk-acceptance recommendations and supporting documentation.

Responsibilities

Execute assigned RMF responsibilities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable DoD and Army cybersecurity requirements.
Support system categorization, security-control implementation and assessment, authorization, reauthorization, and Continuous Monitoring.
Analyze technical configurations, control implementations, compliance evidence, and cybersecurity documentation; identify deficiencies and recommend corrective actions.
Develop, review, maintain, and validate eMASS authorization packages, security controls, implementation statements, assessment evidence, and findings.
Maintain traceability among security controls, supporting evidence, assessment findings, and POA&Ms; coordinate package updates, quality reviews, and submissions through established RMF leadership.
Evaluate NIST SP 800-53 controls against documented implementations and technical evidence; validate findings, identify compliance gaps, distinguish false positives, and assess inherited controls.
Review ACAS, SCAP, DISA STIG, and other approved vulnerability assessment results; identify vulnerabilities, affected assets, configuration weaknesses, and compliance deficiencies.
Coordinate remediation, maintain Government-approved vulnerability tracking records, and validate corrective actions before recommending closure.
Develop and maintain POA&Ms documenting weaknesses, risks, remediation milestones, and supporting evidence; escalate significant unresolved risks.
Perform recurring security-control reviews, vulnerability assessments, compliance checks, and cybersecurity reporting; identify system changes, emerging threats, and conditions affecting authorization or cybersecurity posture.
Support Continuous Monitoring documentation, corrective actions, and risk tracking.
Report suspected incidents, significant vulnerabilities, and security-control failures through authorized channels; support incident-response coordination without independently accepting risk or approving exceptions.
Prepare accurate, complete, traceable, and technically defensible cybersecurity deliverables; verify findings, asset identifiers, control mappings, vulnerability references, and evidence before submission.
Correct errors, unsupported assertions, and documentation inconsistencies promptly; maintain version control and documentation integrity.
Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders to collect evidence, investigate technical issues, coordinate remediation, and accomplish RMF activities.
Prepare and present technical briefings on vulnerabilities, controls, POA&Ms, risks, RMF activities, and authorization status.
Communicate progress, blockers, outstanding findings, and corrective recommendations professionally; maintain leadership visibility and avoid unauthorized commitments.
Follow reasonable authorized direction, meet established deadlines, communicate conflicting instructions or delays promptly, and comply with company, Government, security, and installation policies.
Maintain APG/ATEC-required professional business attire during on-site duty hours, subject to approved exceptions.