Senior Information Systems Security Officer (ISSO)

AGE Solutions • Alexandria, VA

7d • $160,000 • Remote

About The Position

AGE Solutions is seeking a Senior Information Systems Security Officer (ISSO) to support our DoD customer. The Senior ISSO will serve as a senior cybersecurity Subject Matter Expert (SME), providing technical expertise and guidance for the security, authorization, vulnerability management, and continuous monitoring activities required to operate and sustain our customer’s capabilities. The successful candidate will work closely with Government cybersecurity, engineering, architecture, and program teams to identify and mitigate cybersecurity risks, address complex security challenges, and ensure customer systems and capabilities comply with applicable DoD and DISA cybersecurity requirements. This is a remote position; however, occasional local travel to customer facilities throughout the Washington, DC Metro area may be required based on mission and customer needs.

Requirements

• MA/MS with at least 15 years of relevant experience. Additional equivalent experience may substitute for a master’s degree.
• One of the following current certifications: Security X/CASP+, CCISO, CCSP, CCGRC/CAP, Cloud+
• Must have and maintain a current DoD Top Secret clearance.
• Candidates must reside within a commutable distance of our customer's facilities in the Washington, DC metro area in order to work onsite when required.
• Extensive experience supporting cybersecurity, Information Assurance, Information Systems Security, or Security Engineering activities.
• Senior-level experience supporting cybersecurity within DoD environments.
• Demonstrated experience analyzing and resolving complex cybersecurity and information systems security issues.
• Extensive experience implementing and supporting DoD RMF processes and controls.
• Experience developing, reviewing, and maintaining eMASS/RMF authorization packages and supporting artifacts.
• Hands-on experience with cybersecurity tools including ESS, ACAS, COAMS, CMRS, STIG Viewer, and STIG/SRRs.
• Experience assessing system vulnerabilities, security findings, risks, and remediation activities.
• Experience supporting A&A, continuous monitoring, vulnerability management, incident management, and cybersecurity compliance.
• Ability to independently analyze technical issues and develop recommended courses of action.
• Strong written and oral communication skills, including the ability to communicate complex cybersecurity issues to technical teams and senior leadership.
• Experience with Microsoft Office products, including Word, Excel, and SharePoint.
• Working knowledge of Microsoft Windows, Microsoft Server, VMware, or comparable enterprise infrastructure technologies.
• Ability to effectively collaborate in a remote environment with Government and contractor cybersecurity, engineering, architecture, and program teams.

Nice To Haves

• Previous DISA cybersecurity experience.
• Experience supporting Mission Partner Environment (MPE) or similar mission-partner environments.
• Previous experience serving as an ISSO, senior cybersecurity advisor, or security engineering SME.
• Experience serving as a Trusted Agent.
• Practical knowledge of Public Key Infrastructure (PKI), certificates, and public/private key management.
• Experience working across cybersecurity, network, cloud, identity, architecture, and systems engineering teams.
• CISSP or comparable senior-level cybersecurity certification.

Responsibilities

• Serve as a senior cybersecurity SME supporting systems and capabilities.
• Support implementation and execution of the Risk Management Framework (RMF).
• Support Assessment and Authorization (A&A) activities and maintenance of system authorization packages.
• Monitor cybersecurity posture, vulnerabilities, findings, and remediation activities.
• Analyze cybersecurity risks and vulnerabilities and develop recommendations and courses of action for mitigation.
• Develop, review, and maintain RMF artifacts, cybersecurity documentation, and supporting evidence.
• Support vulnerability management, incident management, change management, audit and compliance, and access-control activities.
• Monitor and support completion and maintenance of eMASS packages and associated cybersecurity artifacts.
• Review and analyze STIG/SRR findings and support remediation and compliance activities.
• Utilize cybersecurity tools including ESS, ACAS, COAMS, CMRS, STIG Viewer, and eMASS to assess and maintain system cybersecurity posture.
• Coordinate with system owners, cybersecurity personnel, engineers, architects, and Government stakeholders to resolve complex cybersecurity issues.
• Provide senior-level cybersecurity guidance, technical analysis, alternatives, and recommendations to leadership and technical teams.
• Independently analyze complex cybersecurity challenges and develop practical solutions supporting mission requirements.

Benefits

• 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
• Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
• 401(k) with Match: We match 3% of your contributions with immediate vesting.
• Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
• Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
• Parental Leave: 15 days of fully paid leave for new parents, because family matters.
• Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
• Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
• Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior