To support secure cloud-native software solutions, the fully remote Information Systems Security Officer (ISSO) will lead Risk Management Framework (RMF) activities, manage authorization efforts, and oversee continuous monitoring initiatives for accredited cloud environments.
Key responsibilities
Execute and maintain all phases of the DoD RMF lifecycle, including categorization, implementation, assessment, authorization, and continuous monitoring activities Build, manage, and maintain authorization packages within eMASS, ensuring documentation remains current and audit-ready Partner with engineering teams to remediate vulnerabilities, validate STIG compliance, and support assessments while mapping cloud-native technologies to NIST 800-53 security controls Required qualifications 3-5 years of experience supporting DoD cybersecurity, RMF authorizations, information assurance, or ATO package management Hands-on experience with eMASS, DISA PPSM, NIST 800-53, NIST 800-37, ACAS/Nessus, STIGs, and DoD cybersecurity policies Experience supporting cloud environments, containers, Kubernetes, CI/CD pipelines, and continuous monitoring programs Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, Computer Science, or a related field (or equivalent experience) Active Secret Security Clearance required with eligibility to obtain a higher clearance
Experience: 8 years required