Information System Security Officer (ISSO)

PD Inc • , DC

7d

About The Position

The ISSO will provide senior-level, hands-on cybersecurity support for assigned federal information systems and will be qualified to assume Lead ISSO responsibilities during scheduled or unscheduled absences. The position will support Risk Management Framework (RMF), authorization, continuous monitoring, vulnerability management, POA&M management, audit readiness, and cybersecurity compliance activities across enterprise and cloud environments. The Senior ISSO will work closely with the Lead ISSO, Government ISSM, System Owners, technical teams, assessors, and other cybersecurity stakeholders to maintain system security posture, develop and maintain authorization artifacts, track remediation activities, review security controls and evidence, and support Government cybersecurity reviews and audits.

Requirements

• Experience supporting cybersecurity, information assurance, or ISSO activities in a federal environment
• Hands-on experience with FISMA, NIST RMF, NIST SP 800-53, FedRAMP, ATO packages, SSPs, continuous monitoring, vulnerability management, and POA&M management
• Experience supporting FISMA Moderate systems, major applications, general support systems, or FedRAMP-authorized cloud services
• Working familiarity with cybersecurity tools and platforms such as CSAM, ServiceNow, Splunk, Tenable Nessus or Qualys, Microsoft Defender, Azure, Microsoft 365, Entra ID, Intune, Okta, Palo Alto, and Zscaler
• Strong technical writing, documentation, risk analysis, and stakeholder communication skills
• Must be a U.S. Citizen
• Must be eligible to successfully complete and maintain a Tier 4 background investigation
• One or more Microsoft security certifications is required (SC-500, SC-300, SC-200, SC-100, or other relevant Microsoft Azure, Microsoft 365, security, identity, or compliance certifications)

Nice To Haves

• Candidates with a combination of federal RMF/ISSO experience, a recognized cybersecurity certification, and Microsoft security certifications will be strongly preferred.
• CISSP
• CompTIA Security+
• CISM
• CGRC / CAP
• CCSP
• Similar recognized cybersecurity or information assurance certification

Responsibilities

• Provide senior-level, hands-on cybersecurity support for assigned federal information systems.
• Assume Lead ISSO responsibilities during scheduled or unscheduled absences.
• Support Risk Management Framework (RMF), authorization, continuous monitoring, vulnerability management, POA&M management, audit readiness, and cybersecurity compliance activities across enterprise and cloud environments.
• Work closely with the Lead ISSO, Government ISSM, System Owners, technical teams, assessors, and other cybersecurity stakeholders.
• Maintain system security posture.
• Develop and maintain authorization artifacts.
• Track remediation activities.
• Review security controls and evidence.
• Support Government cybersecurity reviews and audits.
• Investigate technical issues.
• Validate security approaches.
• Reproduce and assess configurations.
• Evaluate emerging technologies.
• Develop practical solutions to security and compliance challenges.
• Help shape the technical approaches, processes, tools, and practices used by the cybersecurity team.
• Help mature the team's RMF, continuous monitoring, vulnerability management, security engineering, and automation practices.
• Influence the technical direction and operating model of a growing federal cybersecurity team.

Benefits

• Access to a large cybersecurity laboratory environment
• Access to engineering resources
• Access to reach-back subject matter experts across cloud, networking, identity, systems engineering, application security, vulnerability management, security operations, and federal cybersecurity compliance
• Access to a dedicated cybersecurity and engineering laboratory for testing, validation, prototyping, and technical investigation
• Reach-back access to experienced cybersecurity, cloud, network, systems, identity, application, and infrastructure SMEs
• Opportunities to work directly with engineers to translate security findings and control requirements into implementable technical solutions
• Ability to evaluate and test security tools, configurations, architectures, and remediation approaches outside of the production environment
• Access to organizational lessons learned, technical expertise, reusable engineering approaches, and cybersecurity research developed across other federal programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed