Eight years of relevant experience in information systems security or cybersecurity compliance.
Bachelor's degree in cybersecurity, information technology, computer science, or a related field.
Active Secret security clearance required.
Current certification meeting IAT Level II requirements.
Experience with Risk Management Framework (RMF) activities and federal information systems security documentation.
Knowledge of security controls, vulnerability management, and continuous monitoring processes.
Familiarity with DISA STIGs and system security assessment results.
Responsibilities
Maintain system security documentation, including security plans and operating procedures.
Support Risk Management Framework (RMF) activities and system authorization efforts.
Coordinate with technical teams to assess security controls and address vulnerabilities.
Develop and track Plans of Action and Milestones (POA&Ms) for remediation activities.
Review vulnerability scan results to identify compliance gaps and support corrective actions.
Support continuous monitoring and report security status and risks to stakeholders.
Review proposed system changes for security impacts and update documentation accordingly.
Benefits
Hybrid work environment with onsite requirements at Fort Meade, Maryland.
Opportunity to work closely with government stakeholders and technical teams.
Engagement in critical cybersecurity initiatives for the DoD PKI program.
Professional development opportunities in a high-stakes security environment.
Full Job Description
Information Systems Security Officer (ISSO)
RedMatter Solutions is seeking an Information Systems Security Officer (ISSO) to provide cybersecurity oversight and support for the DoD PKI program at DISA.
The ISSO will work with technical teams and government stakeholders to maintain security documentation, assess compliance, track security risks, and support the ongoing authorization and secure operation of assigned systems. This position requires working hybrid onsite at Fort Meade, Maryland, and an active Secret clearance.
Requirements
Responsibilities
Maintain system security documentation, including security plans, security control implementation descriptions, supporting evidence, and operating procedures.
Support Risk Management Framework (RMF) activities, security assessments, and system authorization efforts.
Coordinate with system administrators and engineers to assess security controls and address vulnerabilities, configuration weaknesses, and assessment findings.
Develop and maintain Plans of Action and Milestones (POA&Ms), tracking remediation activities through completion.
Review vulnerability scan results and Security Technical Implementation Guide (STIG) assessments to identify compliance gaps and support corrective actions.
Support continuous monitoring activities and report system security status, outstanding risks, and remediation progress to appropriate stakeholders.
Review proposed system changes for security impacts and coordinate updates to security documentation and control evidence.
Support security requirements for CSP sustainment and CA development activities, including assessment of changes to PKI-related systems.
Assist with security incident reporting and response coordination in accordance with established procedures.
Participate in security reviews, audits, and meetings with government personnel and technical teams.
Required Qualifications
Eight years of relevant experience in information systems security, cybersecurity compliance, or related work.
Bachelor's degree in cybersecurity, information technology, computer science, or a related field.
Active Secret security clearance.
Current certification satisfying the position's IAT Level II requirement.
Experience supporting RMF activities and maintaining security documentation for federal or DoW information systems.
Working knowledge of security controls, vulnerability management, continuous monitoring, and remediation tracking.
Familiarity with DISA STIGs and the review of system security assessment results.
Ability to communicate security requirements and findings clearly to technical teams and government stakeholders.
