Cleared Onsite Information Systems Security Officer (ISSO) – Sr (Cloud) (5274)
About The Position
SMX is seeking a highly skilled Information Systems Security Officer (ISSO) – Sr (Cloud) to support a mission-critical federal program in Huntsville, AL. This individual will serve as a senior cybersecurity and cloud security resource responsible for supporting the security posture, compliance activities, and operational security requirements for enterprise cloud environments and associated information systems. The ideal candidate will have extensive experience supporting classified environments, implementing cybersecurity best practices, and working within complex federal IT infrastructures. The selected candidate will work closely with engineering, cloud, infrastructure, and government stakeholders to ensure systems remain compliant with federal cybersecurity requirements while supporting operational mission needs. This role requires strong technical expertise across cloud security, vulnerability management, continuous monitoring, incident response support, and security assessment activities. This position is on site in Washington DC and an active Top Secret clearance is mandatory.
Requirements
- Proficiency in SQL and a strong understanding of database systems.
- Active TS clearance required, SCI Eligible
- Minimum of 9 years of professional experience in cybersecurity, information assurance, or information systems security
- Minimum of 7 years of experience serving as an ISSO within a cleared federal environment
- Possess at least one of the following certifications: CISSP, GISP, CompTIA CASP+, Equivalent DoD 8570 IAM Level III certification
- Must possess at least one cloud security certification from AWS, Azure, or GCP, including one or more of the following: AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, (ISC)² Certified Cloud Security Professional (CCSP), Microsoft AZ-500 Azure Security Engineer Associate, Google Professional Cloud Security Engineer
- Experience supporting federal RMF and ATO processes
- Strong understanding of NIST security controls, vulnerability management, continuous monitoring, and federal cybersecurity requirements
- Hands-on experience with enterprise security and monitoring tools such as: Splunk, Tenable Nessus, IBM Guardium, HP WebInspect, Security Center, NMAP, Similar enterprise cybersecurity platforms
- Experience supporting cloud-based environments and associated security controls
- Strong analytical, troubleshooting, and problem-solving skills
- Ability to work independently and collaboratively in a fast-paced operational environment
- Strong written and verbal communication skills
Nice To Haves
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field
- Advanced degree preferred
- Experience supporting cloud environments within AWS GovCloud or other federal cloud platforms
- Familiarity with Agile delivery methodologies and DevSecOps practices
- Prior experience supporting FBI or other federal law enforcement/intelligence community environments preferred
Responsibilities
- Serve as the primary ISSO supporting cloud-hosted and enterprise information systems within classified environments
- Support system security compliance activities in accordance with RMF, NIST, and federal cybersecurity standards
- Maintain and update security documentation including SSPs, POA&Ms, security control assessments, and related artifacts
- Coordinate and support ATO package development, continuous monitoring, and annual security review activities
- Perform vulnerability analysis, remediation tracking, and security reporting using enterprise security tools
- Monitor security posture and support incident response and audit activities as required
- Collaborate with system administrators, cloud engineers, developers, and government stakeholders to ensure secure system operations
- Conduct security assessments and evaluate system configurations against security baselines and compliance requirements
- Support implementation and management of cloud security controls across AWS, Azure, and/or GCP environments
- Analyze and evaluate security risks, recommend mitigations, and support remediation planning efforts
- Assist with security tool integration, log analysis, and monitoring activities across enterprise environments
- Support cybersecurity process improvement initiatives and contribute to security best practices across the program
Benefits
- health insurance
- paid leave
- retirement
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
