Information System Security Officer (ISSO), Journeyman

Peraton • Herndon, VA

2d • $66,000 - $106,000

About The Position

We are seeking a highly skilled and innovative Information System Security Officer (ISSO), Journeyman to join our team in the greater DMV area, supporting the Army National Guard.

Requirements

• 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
• Clearance: Active TS/SCI clearance.
• Candidate must meet ONE of the following:
• Bachelor’s degree in Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR
• Relevant DoD/military training (examples: 531‑25B40‑C46; Information Systems Security Manager (Intermediate) Playlist); OR
• Relevant professional certification or equivalent experience (examples: GMON, CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GCSA, GSEC, Security+, SSCP).
• Experience supporting RMF/A&A, ISSO/ISSM functions, or system security administration in DoD or large enterprise environments.
• Hands‑on experience with eMASS (or equivalent RMF tools), POA&M management, STIG checklists, vulnerability scanning (ACAS/Nessus), and evidence uploading.
• Familiarity with STIG/CSG application, patch management workflows, scanning/validation cycles, and control implementation documentation.
• Strong documentation, tracking, and communication skills to respond to data calls and produce security status reports.

Nice To Haves

• Prior DoD/ARNG ISSO or eMASS management experience.
• Experience automating evidence collection, integrating scanning pipelines, or improving RMF workflow efficiencies.

Responsibilities

• Maintain eMASS records for assigned systems: update RMF artifacts, POA&Ms, STIG checklists, scan results, and accreditation documentation.
• Coordinate with system owners, engineers, SOC, and compliance staff to document control implementation, vulnerability remediation, and configuration baselines.
• Review system changes for cybersecurity implications and support A&A and re‑authorization activities.
• Orchestrate scanning and patching cycles for PM‑controlled environments and validate remediation evidence.
• Prepare security status reports, respond to accreditation/inspection data calls, and maintain audit‑quality documentation.
• Provide day‑to‑day IA policy guidance, training coordination, and account validation support for system teams.
• Track POA&M progress, verify closure evidence, and assist in remediation prioritization with stakeholders.
• Maintain configuration/change records and support continuous monitoring activities and control validation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees