Information System Security Officer (ISSO)

ECS Tech Inc•Fairfax, VA

3d•$110,000 - $150,000•Hybrid

About The Position

Everforth ECS is seeking an experienced Information System Security Officer (ISSO) to partner with engineering teams in implementing, validating, and documenting security controls across enterprise information systems. This individual will focus on technical security implementation, evidence collection, remediation tracking, and assessment readiness while ensuring deployed capabilities meet federal cybersecurity requirements. The ideal candidate combines hands-on cybersecurity engineering knowledge with experience supporting DoD Risk Management Framework (RMF) authorizations.

Requirements

U.S. Citizen
Active DoD Secret security clearance
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related discipline (or equivalent experience).
6+ years supporting cybersecurity engineering or information assurance efforts within DoD or Federal environments.
Hands-on experience implementing and validating NIST SP 800-53 Rev. 5 security controls.
Experience supporting RMF assessments using NIST SP 800-37 Rev. 2 and NIST SP 800-53A.
Experience reviewing security configurations across Windows, Linux, networking, cloud, virtualization, or container platforms.
Knowledge of identity management, vulnerability management, audit logging, encryption, DevSecOps, and security automation.
Ability to communicate effectively with engineering teams and government stakeholders.
Cybersecurity certification meeting DoD 8140 Cyber Workforce Qualification requirements.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Responsibilities

Translate security control requirements into actionable engineering tasks.
Coordinate implementation activities across infrastructure, networking, cloud, DevSecOps, platform, and application teams.
Review security configurations, system hardening, identity management, audit logging, encryption, vulnerability management, and boundary protection implementations.
Collect and validate technical assessment evidence, including configuration exports, logs, scan results, test artifacts, and engineering documentation.
Develop technical implementation narratives supporting RMF documentation.
Coordinate technical implementation across multiple authorization boundaries and identify where separate implementation evidence is required.
Track remediation activities through completion and verify corrective actions.
Support assessment preparation by organizing technical demonstrations and preparing engineering subject matter experts.
Maintain technical implementation records and evaluate configuration changes impacting authorization evidence.
Collaborate with cybersecurity leadership to resolve implementation gaps, technical risks, and assessment findings.
Other duties, as assigned.