Information System Security Officer (ISSO) – Intermediate (5756)

SMX•Hollywood, MD

4d•$93,700 - $156,200•Remote

About The Position

SMX is seeking an Intermediate Information System Security Officer (ISSO) to lead security compliance and risk for one or more cloud-based and/or classified systems. The role supports information assurance for a program, organization, system, or enclave and helps ensure alignment with NIST SP 800-53, FedRAMP, and the NIST Risk Management Framework (RMF). Working under senior ISSOs and the Information System Security Manager (ISSM), the ISSO manages the security authorization and continuous monitoring lifecycle, maintains assigned systems’ operational security posture, performs day-to-day security operations, and works with engineering teams to integrate security into DevSecOps practices. The role collaborates with internal stakeholders, cross-functional teams, 3PAOs, and ISV customers. This is a fully remote position open to candidates across the United States. The proposed salary range is $93,700–$156,200 USD. SMX offers health insurance, paid leave, retirement, and learning and development opportunities. Applicants must be U.S. citizens able to obtain and maintain a Secret clearance. Selected applicants may be subject to a background investigation and/or education verification. SMX does not provide immigration or employment-authorization sponsorship for this position.

Requirements

U.S. citizenship and ability to obtain and maintain a Secret clearance.
At least 5 years of cybersecurity experience, including at least 2 years as an ISSO in a cloud, federal, DoD, or Intelligence Community environment.
Working knowledge of NIST SP 800-53 Rev. 5 and FedRAMP Moderate or High.
Experience with RMF steps and authoring SSPs, POA&Ms, DRs, and related authorization documentation.
Experience authoring or reviewing security policies and working with 3PAOs, commercial customers, and federal agencies.
Ability to work effectively in a fully remote, distributed-team environment.
Strong analytical and documentation skills.
Excellent communication and stakeholder-management skills.
Ability to balance technical depth with business and mission requirements.
Risk-based decision-making and a continuous-improvement mindset.
Self-directed approach and ability to collaborate across a remote, cross-functional team.

Nice To Haves

FedRAMP, DoD, or DISA experience with ATO processes.
Security+ certification or an equivalent DoD 8570/8140 baseline certification.
Experience managing or interpreting vulnerability scanning results and integrating them with POA&M workflows.

Responsibilities

Support the information assurance program for assigned systems, programs, or enclaves.
Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
Develop and maintain RMF documentation, including SSPs, SAPs, SARs, POA&Ms, Risk Assessment Reports, SRTMs, FedRAMP appendixes, and Continuous Monitoring Strategies.
Support system authorization and re-authorization under RMF Steps 1–6 and obtain or maintain ATOs for systems under purview.
Maintain the operational security posture of assigned information systems and support senior ISSOs or the ISSM in maintaining cybersecurity posture.
Evaluate security solutions for compliance with requirements for processing classified and/or sensitive information.
Perform vulnerability and risk assessment analysis to support security authorization.
Support annual 3PAO assessments and security audits.
Support responses to security incidents and work with incident response teams to ensure compliance with associated controls.
Collaborate with cross-functional teams to implement security controls in cloud environments.
Evaluate and document significant change requests and assess their security impact.
Support continuous monitoring activities, including timely reporting, remediation, and POA&M updates.
Work with customers and cross-functional teams to define and achieve cybersecurity objectives.
Collaborate with cybersecurity staff and maintain alignment with evolving federal security requirements.