Sr. Cybersecurity Information System Security Officer (ISSO)

MILVETS Systems Technology•Patrick SFB, FL

1d•Onsite

About The Position

The Senior Cybersecurity Information System Security Officer (ISSO) supports DoD information systems by ensuring compliance with Department of Defense cybersecurity policies and Risk Management Framework (RMF) requirements. This role provides senior-level cybersecurity oversight across system lifecycles, supporting system authorization (ATO), continuous monitoring, and operational security for classified and unclassified systems in support of unmanned rocket launches from the Eastern Range (Cape Canaveral Air Force Station, FL). The Senior ISSO works closely with Information System Owners (ISOs), Information System Security Managers (ISSMs), system engineers, and program leadership to manage cybersecurity risk and maintain compliance in accordance with DoD and federal regulations.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience)
8+ years of cybersecurity or information assurance experience
5+ years supporting DoD RMF programs as an ISSO, ISSE, or similar role
Strong working knowledge of DoDI 8510.01 , NIST RMF , and CNSSI 1253
Hands-on experience with eMASS
Experience supporting ATO packages and ongoing authorization activities
Familiarity with DISA STIGs, ACAS, HBSS, and SCAP tools
DoD 8570 / 8140 compliant certification , such as: CISSP - Certified Information Systems Security Professional CAP – Certified Authorization Professional
Acceptable alternative (with sufficient experience): Security+ CE — CompTIA Security+ (Continuing Education)
Must possess the following qualities: Self-starter with desire for continuous learning and greater responsibility
Ability to work effectively within a dynamic, diverse, and team-oriented environment
Ability to work independently with minimal supervision to achieve project milestones and deadlines
Ability to prioritize and deal with frequent change - Ability to follow approved policies/guidelines
Ability to meet new challenges with an open mind and optimistic response
Requires occasional adjusted work hours (nights, weekends, holidays) to meet important product delivery deadlines and to support launches
Occasional local travel may be required
Must have and maintain a DoD Secret security clearance, which requires U.S. citizenship or U.S. Naturalization
Valid U.S. driver’s license is required
All candidates selected will be subject to a security background investigation and must meet all eligibility requirements for access to classified information
College Degrees must come from a school that is accredited in the discipline of the degree to be considered.

Nice To Haves

Master’s degree in Cybersecurity or related field
Knowledge of DoD cloud environments (AWS GovCloud, Azure Government)
Prior experience working for or supporting DoD agencies
Strong understanding of cybersecurity risk management in mission environments
Excellent documentation and briefing skills
Ability to interface effectively with government customers and auditors
Proven leadership and mentoring capabilities

Responsibilities

RMF & Authorization Support: Lead and support Risk Management Framework (RMF) activities per DoDI 8510.01
Create, review, and maintain RMF documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and Continuous Monitoring (CONMON) plans
Support Authority to Operate (ATO), Interim Authority to Test (IATT), and ATO renewals for DoD systems
Coordinate with Authorizing Officials (AOs), Security Control Assessors (SCAs), and Information System Security Managers (ISSMs) throughout the authorization lifecycle
Compliance & Policy: Ensure compliance with DoD cybersecurity policies , including DoD 8500-series , NIST SP 800-53 , and CNSSI 1253
Prepare systems for eMASS submissions , audits, and inspections
Support internal and external cybersecurity assessments, including DCMA, DCSA, and command inspections
Interpret and apply security controls to meet mission and contractual requirements
Continuous Monitoring & Operations: Execute continuous monitoring (CONMON) activities, including vulnerability scanning, Security Technical Implementation Guide (STIG) compliance, and security control assessments
Track and manage vulnerabilities, findings, and POA&Ms to closure
Monitor system changes for security impact and ensure RMF change management compliance
Support incident response, reporting, and remediation in coordination with program and Security Operations Center (SOC) teams
Technical & Security Oversight: Ensure implementation and validation of DISA STIGs , SCAP scans, and security technical implementation guidance
Review system configurations for compliance with DoD security baselines
Coordinate with network, system, and cloud engineering teams to remediate security findings
Support both classified and unclassified environments, as applicable
Leadership & Program Support: Provide senior-level cybersecurity guidance to ISSOs and technical staff
Serve as the primary cybersecurity advisor to program managers and system owners
Brief leadership on cybersecurity posture, risks, and compliance status
Contribute to program planning, security strategy, and process improvements