Job DescriptionTechSur is seeking an Information System Security Officer to support DOL OCIO/ETA SWARAS security compliance, authorization, continuous monitoring, vulnerability management, POA&M remediation, risk register maintenance, and security documentation. This role serves as the security compliance lead for a FISMA Moderate application ecosystem and coordinates with DOL OCIO cybersecurity stakeholders, application teams, database teams, and program leadership.
Key Responsibilities- Lead SWARAS FISMA Moderate compliance support, including NIST 800-53 controls, NIST 800-171 alignment, FIPS, HSPD-12/PIV, TIC, and DOL security policy compliance.
- Maintain CSAM artifacts, system security documentation, security/privacy plans, risk registers, POA&Ms, audit responses, and ATO support documentation.
- Analyze vulnerability scan results, audit findings, penetration testing results, and security control assessments, then coordinate remediation with DevSecOps, DBA, and system owner stakeholders.
- Track POA&M milestones, remediation timelines, evidence packages, and closure documentation within Government-defined timelines.
- Support secure SDLC controls, code review evidence, static/dynamic testing evidence, third-party/open-source component tracking, and security release gates.
- Support incident response requirements, including rapid escalation for PII-related incidents and coordination with DOL OCIO security stakeholders.
- Provide security input for CPIC reporting, portfolio data calls, continuous monitoring, and governance reviews.
QualificationsRequired Qualifications- 5+ years of federal cybersecurity, ISSO, RMF, ATO, or security compliance experience.
- Hands-on experience with FISMA Moderate, NIST 800-53, RMF, POA&M management, vulnerability management, security documentation, and ATO support.
- Experience Supporting Department of Labor IT programs is REQUIRED.
- Experience coordinating remediation across application, database, infrastructure, and DevSecOps teams.
- Strong understanding of federal security documentation, security control assessment findings, remediation planning, and continuous monitoring.
- U.S. Citizenship and ability to obtain and maintain DOL Public Trust suitability.
- Prior DOL OCIO, ETA, CSAM, ATO, or federal civilian ISSO experience.
- Security+, CISSP, CISM, CAP, CGRC, CEH, or equivalent security certification.
- Experience with Splunk, ServiceNow, Jira, Confluence, SolarWinds, SAST/DAST, and vulnerability scanning tools.
Additional InformationAll your information will be kept confidential according to EEO guidelines.
