Information Systems Security Officer (ISSO)
About The Position
DAn Solutions is seeking an experienced Information Systems Security Officer (ISSO) to support authorization, compliance, and continuous security monitoring of mission applications, cloud infrastructure, and enterprise services. The role collaborates with government security personnel, system owners, developers, and infrastructure engineers to maintain security documentation, evaluate risks, and support compliance with Department of Defense and Intelligence Community requirements. The position requires an active TS/SCI clearance with CI polygraph and is full-time, on-site at a government facility in Charleston, South Carolina, or the National Capital Region. Compensation depends on the applicable Labor Category and factors including education, relevant experience, certifications, and other required qualifications; no salary figures are provided.
Requirements
- Active TS/SCI clearance with CI Polygraph.
- Bachelor's degree in a technical or managerial discipline and at least 5 years of relevant practical experience; alternatively, a high school diploma or equivalent and more than 7 years of relevant practical experience.
- Previous Intelligence Community experience.
- Experience performing ISSO or comparable security authorization responsibilities.
- Experience supporting RMF and system authorization packages.
- Proficiency with eMASS and ACAS.
- Experience reviewing vulnerability assessments and coordinating remediation.
- Knowledge of system boundaries, security controls, access management, and continuous monitoring.
- Strong technical writing and communication skills.
- Ability to meet applicable cybersecurity workforce qualification requirements.
Nice To Haves
- DoD 8140/8570 IAM Level II or III qualifications.
- Experience with ICD 503 authorization processes.
- AWS GovCloud, Kubernetes, or OpenShift security experience.
- Familiarity with DevSecOps security testing and automated evidence collection.
- Experience implementing STIGs and security configuration assessments.
- Knowledge of ICAM, PKI, Zero Trust, and cloud security.
- CISSP, CGRC, or comparable certifications.
Responsibilities
- Support Risk Management Framework (RMF) activities to obtain and maintain system Authorizations to Operate (ATOs).
- Develop and maintain System Security Plans, control implementation statements, and authorization documentation.
- Coordinate with System Owners, ISSMs, assessors, and engineering teams.
- Maintain POA&Ms and track vulnerability remediation.
- Manage security documentation and evidence within eMASS.
- Review ACAS scans, security configuration assessments, and application security findings.
- Evaluate the security impact of system changes, releases, and infrastructure modifications.
- Support continuous monitoring and ongoing authorization activities.
- Review access controls, privileged access, audit logging, and configuration baselines.
- Assist with incident reporting, investigations, and corrective actions.
- Prepare security reports and brief government stakeholders.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
