Information System Security Officer (ISSO)
Fort Belvoir, VA
Full Time Senior-level / Expert Clearance required USD 63K - 147K *
Redhorse
We’ve all been on your side of the table at some point in our careers, in uniform or government. That experience helps us understand your challenges in a…About the Role:Redhorse is seeking a highly skilled Information System Security Officer (ISSO) supporting the Army INSCOM G-6 at Fort Belvoir, VA. In this critical role, you will be responsible for the overall security posture of complex information systems, ensuring compliance with stringent DoD and NIST guidelines. You will lead a team of cybersecurity professionals, directly impacting the security of sensitive national security systems and contributing significantly to Redhorse's mission of transforming how the government uses data and technology. This position offers the opportunity to work on high-impact projects within a dynamic and collaborative environment.
Key Responsibilities:
- Oversee the security of information systems, ensuring compliance with DoD and NIST guidelines (AR 25-2, DA 25-2-14, NIST SP 800-53).
- Manage eMASS records, validate security controls, assess scan results, and track Plan of Action and Milestones (POA&M) progress.
- Lead ongoing monitoring efforts to maintain system security and compliance, identifying and mitigating risks proactively.
- Manage the daily activities and professional development of a team of Cybersecurity Analysts.
- Collaborate with the Organization Information System Security Manager (O-ISSM) to achieve and maintain Authorization to Operate (ATO) for systems on DoD/IC networks.
- Provide regular status reporting to government leads, promptly addressing risks and security issues.
- Collaborate with Security Control Assessors to conduct comprehensive risk assessments of systems and their impact on networks and mission data.
- Develop and maintain cybersecurity policies, procedures, and documentation (Standard Operating Procedures (SOPs), Tactics, Techniques, and Procedures (TTPs), etc.).
Required Education/Clearance:
- Bachelor's degree in a STEM field + 12 years of cybersecurity experience; OR
- Master's degree in STEM + 10 years of cybersecurity experience; OR
- PhD in STEM + 8 years of cybersecurity experience.
- Must meet DoD 8140/8570.01-m requirements for a privileged user on TS/SCI systems.
- Active Top Secret (TS) security clearance with eligibility for Sensitive Compartmented Information (SCI) and NATO access prior to starting work.
Required Experience:
- 10 years of experience validating system security controls and managing vulnerabilities.
- 8 years of experience with Risk Management Framework (RMF) and eMASS.
- 5 years of experience tracking and resolving POA&Ms.
- 3 years of experience performing continuous monitoring.
Desired Experience:
- We encourage all candidates who meet the basic requirements to apply, even if you do not have all of the following experience:
- Experience working with DISA Security Technical Implementation Guides (STIGs), Security Requirement Guides (SRGs), and security guides.
- Experience leading a team of cybersecurity professionals on large Department of Defense contracts.
- Experience with DataBricks, GitLab, or Jira.
- Advanced certifications (e.g., CISSP, CISM).
- Experience with cloud security architectures.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: CISM CISSP Clearance Cloud Compliance Databricks DISA DoD DoDD 8140 DoDD 8570 eMASS GitLab Jira Monitoring NATO NIST NIST 800-53 PhD POA&M Risk assessment Risk management RMF Security Clearance STEM STIGs Top Secret TS/SCI TTPs Vulnerabilities
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.