Information System Security Officer (ISSO)
Darkwolfsolutions · Chantilly, VA
About this role
**Dark Wolf** is seeking an **Information System Security Officer (ISSO)** to lead a collaborative team to develop, manage, and maintain **Information System Security Assessment and Authorization (A&A) packages**. You will support planning, execution, and monitoring of the **RMF (Risk Management Framework) seven-step process** for customers, helping teams navigate **ATO/cATO/deployment** processes while maintaining strong security and compliance standards. **Location:** Chantilly, VA (Hybrid / flexible) --- ### Key Responsibilities - Create, manage, and maintain A&A packages, including **System Security Plans (SSPs)**, **Security Control Traceability Matrices (SCTMs)**, **Plans of Action and Milestones (POA&Ms)**, and related artifacts. - Support entry and maintenance of data in information system security systems of record (e.g., **eMASS** or **Xacta**). - Drive cybersecurity activities across the system lifecycle (planning, development, deployment), ensuring proper **hardening** and security analysis to protect **Confidentiality–Integrity–Availability (CIA)**. - Brief **ISSMs/SCAs/AOs** with updates on the cyber posture of the information system. - Manage and implement **Continuous Monitoring** (control reviews, audits, vulnerability scans, penetration test report reviews). - Develop and maintain POA&Ms to track vulnerabilities, mitigation efforts, remediation, and closures; provide fix actions and compensating controls. - Perform POA&M maintenance, including reviews and stakeholder briefings as needed. --- ### Required Qualifications - Experience leading a team of cyber professionals. - **5+ years** of relevant cyber experience. - Experience assessing technical environments and translating implemented security controls into clear **NIST SP 800-53** control narratives supporting **Authorization to Operate (ATO)** documentation. - Familiarity with cloud platforms (at least one of **AWS, Azure, or Google GCP**). - Experience as an **RMF Engineer, ISSO, and/or information assurance engineer**. - Hands-on **eMASS** or **Xacta** experience completing full system lifecycle activities. - Experience with **NIST 800-53 Rev5** and **CNSSI 1253**. - Experience with Air Force risk management policies/procedures, including **DoDI 8510.01**, **AFI 17-101**, **Fast Track ATO Handbook**, and **AF Continuous ATO Playbook**. - Ability to clearly articulate ideas for **executive-level** consumption. - Ability to apply prior experience to new situations, especially during client interactions. - **B.A./B.S.** in Information Security, Computer Science, or related field; or **3 years** equivalent industry experience in lieu of degree. - **US Citizenship** and ability to obtain/maintain a **TS/SCI security clearance**. --- ### Desired Qualifications - Knowledge of the Air Force A&A process and requirements. - Knowledge of SIEM tools such as **Splunk/Elastic**. - Knowledge of **DoD DevSecOps Fundamentals Playbook**. - Experience with **DoD Fast Track ATO Handbook** and **Air Force Continuous ATO Playbook** methodologies. --- ### Compensation Estimated salary range: **$140,000.00 – $160,000.00**, commensurate with experience and technical skillset. --- ### Additional Notes - **EEO/AA employer** (Minorities/Women/Veterans/Disabled and other protected categories). - Must verify identity, confirm US citizenship, and complete employment eligibility verification upon hire. - **Direct, full-time W2 employees only**. No third-party staffing agencies, C2C,
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.