Information Systems Security Officer (ISSO) – Senior/SME Level

Tangent Technologies • Washington, DC

3d • Hybrid

About The Position

Tangent Technologies is seeking a senior/SME-level Information Systems Security Officer to support a federal program. The ISSO is responsible for ongoing information-system security, compliance, and risk management, including developing and implementing security documentation and procedures needed to obtain and maintain an Authority to Operate (ATO). The role advises clients on compliance with federal standards and frameworks, including NIST, FISMA, FedRAMP, and the Risk Management Framework (RMF), and helps implement continuous monitoring practices for assigned systems. This is a hybrid role with some onsite work required. Candidates must successfully complete a federal background investigation, including a financial suitability screening. An active DoD clearance is required.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related cybersecurity field, or six years of work-experience equivalency in addition to the experience listed.
• At least 15 years of experience in ISSO, information assurance, or RMF roles.
• Direct experience developing ATO packages, including SSPs, POA&Ms, and SARs.
• Strong knowledge of NIST SP 800-53, FISMA, and RMF requirements.
• Demonstrated ability to manage 4–6 systems simultaneously.
• Active DoD clearance required.
• Successfully complete a federal background investigation, including financial suitability screening.

Nice To Haves

• Experience with cloud-based systems (SaaS, IaaS, or PaaS) from AWS, Azure, or GCP.
• Experience using Microsoft and Google Suite tools.
• Familiarity with AI tools such as Gemini and ChatGPT.
• Familiarity with Archer or CSAM platforms.
• Relevant certification: CISSP, CISM, CISA, CRISC, or CGRC (one required).
• Experience supporting federal civilian agencies.
• Veteran or military-affiliated background; veterans and military-affiliated individuals are strongly encouraged to apply.

Responsibilities

• Lead the development, review, and maintenance of System Security Plans (SSPs) and authorization packages.
• Prepare ATO packages, including SSPs, Plans of Action & Milestones (POA&Ms), Security Assessment Reports (SARs), and supporting documentation.
• Guide systems through the ATO lifecycle and continuous authorization processes, ensuring compliance with NIST SP 800-53, FISMA, and RMF standards.
• Conduct Security Impact Analyses (SIAs) for system changes, develop vulnerability mitigation strategies, and collaborate with system engineers to maintain secure system baselines.
• Conduct security audits, oversee scanning operations such as ACAS and Nessus, and manage POA&Ms for remediation.
• Perform self-assessments, risk assessments, and annual testing of Contingency Plans and Incident Response Plans.
• Ensure systems adhere to federal, Department of Defense, or Intelligence Community security frameworks.
• Review audit logs, analyze vulnerability scans, and evaluate system-level reports to assess security-control effectiveness.
• Implement security telemetry, manage patch statuses, and monitor system activity for anomalous behavior or potential threats.
• Provide strategic risk and compliance advice to system owners and Information System Security Managers (ISSMs).
• Mentor junior ISSO staff.
• Apply technical knowledge of network security, cloud environments, operating systems, and security assessment tools.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior