Isso

TekSynap•Fort Belvoir, VA

16h•Onsite

About The Position

We are seeking an ISSO to join our Prime Contract with the Defense Threat Reduction Agency. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at www.TekSynap.com . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation. By applying to a role at TekSynap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that TekSynap Corporation may retain and use your name, e-mail, and contact information for purposes related to employment consideration.

Requirements

Active Top-Secret Clearance with SCI eligibility required.
DoD 8570/8140 IAM Level III DoD 8570/8140 CSSP Auditor equivalent certification
3–8 years of progressive experience in Information Assurance, RMF, and NIST compliance.
2-5 Years working in a SOC or CSSP environment.
Extensive, hands-on experience with NIST SP 800-53 (Rev 5 preferred) and DoD RMF processes.
BA/BS College degree required.
Must be a US Citizen
Must possess and maintain an active Top Secret security clearance with SCI eligibility.

Responsibilities

Serve as the final layer of validation for RMF artifacts (e.g., Authorization Boundary Diagrams, HW/SW Lists, Credentialed Scans, SSPs, POA&Ms, SARs, SAPs) collected by Protect Analysts from CSSP subscribers, ensuring all evidence accurately satisfies operational directives.
Map collected artifacts and subscriber security implementations directly to NIST 800-53 Rev 5 control families, ensuring compliance with federal baseline security standards.
Partner closely with CSSP Protect Analysts to translate complex RMF requirements into actionable data-collection requests, bridging the gap between technical cybersecurity operations and formal governance/compliance requirements.
Cross-reference technical vulnerability scan data (ACAS, SCAP, HBSS findings) against subscriber-provided artifacts to ensure that active system weaknesses are accurately documented in current POA&Ms.
Verify, review, and assist in managing security control baselines and validation evidence directly within the Enterprise Mission Assurance Support Service (eMASS) database for all subscriber enclaves.
Evaluate subscriber POA&Ms for accuracy, feasibility, and appropriate risk scoring. Provide clear, actionable feedback to the Protect team and subscribers when artifacts fall short of compliance standards.
Work closely with the CSSP Auditor in maintain highly organized, audit-ready repositories of validated artifacts to support JFHQ-DoDIN operational directives and overarching CSSP Evaluator Scoring Metric (ESM) assessments.