Information Assurance Engineer / Information System Security Officer (ISSO)

Cubic•Fort Meade, MD

34d•Onsite

About The Position

Cubic Digital Intelligence (CDI) is seeking an Information System Security Officer (ISSO) to support Department of Defense (DoD) cybersecurity programs. The ISSO will be responsible for implementing and maintaining Risk Management Framework (RMF) activities, supporting system accreditation efforts, continuous monitoring, vulnerability management, and cybersecurity compliance across classified and unclassified environments. This position works closely with Program Managers, Information System Security Managers (ISSMs), System Owners, Engineers, and Government stakeholders to ensure systems maintain Authorization to Operate (ATO) while meeting applicable DoD and Federal cybersecurity requirements. The ISSO will develop and maintain cybersecurity documentation, coordinate remediation activities, support security assessments, and help strengthen the organization's overall security posture in support of critical national security missions.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical discipline (or equivalent combination of education and experience).
Three (3) or more years of experience supporting Information Assurance, RMF, cybersecurity compliance, or Information System Security Officer (ISSO) responsibilities within DoD or Federal environments.
One or more DoD 8570/8140 IAT Level II certifications (e.g., Security+, CySA+, GSEC, SSCP, or equivalent).
Active DoD Secret security clearance.

Nice To Haves

Experience supporting classified DoD and working within cross-functional technical teams.
Experience using eMASS to manage RMF authorization packages and continuous monitoring activities.
Experience with Kubernetes, container technologies, cloud platforms, and container vulnerability management.
Professional certifications such as CISSP, CISM, CAP, CASP+, CCSP, or GSLC.

Responsibilities

Support the implementation and sustainment of the Risk Management Framework (RMF) in accordance with NIST SP 800-37 and DoD RMF guidance.
Develop, maintain, and update cybersecurity documentation, including SSPs, POA&Ms, Continuous Monitoring Plans, Configuration Management Plans, and Supply Chain Risk Management (SCRM) Plans.
Review and analyze vulnerability scan results from ACAS/Nessus, Tenable, Trivy, OpenSCAP, and other security assessment tools while coordinating remediation efforts with engineering teams.
Maintain and update authorization packages within eMASS and support security control implementation, assessment, and authorization activities.
Track DISA task orders (DTOs), cybersecurity findings, POA&M items, and remediation milestones to ensure timely resolution and compliance with Government requirements.
Participate in security assessments, vulnerability reviews, and compliance audits to validate adherence to DoD cybersecurity policies and standards.
Prepare technical reports, executive briefings, and status updates related to cybersecurity compliance, vulnerabilities, and continuous monitoring activities.