Description
We are seeking a Federal Cloud Information Systems Security Officer (ISSO) to join our team. As an ISSO, you will work with a cross-functional team to solve complex technical and cybersecurity challenges across a broad range of technologies, delivering secure Cloud Services solutions to federal customers.
The ideal candidate brings a strong combination of ISSO oversight, hands-on vulnerability management, and secure cloud engineering experience, with the ability to operate in classified, disconnected environments.
Responsibilities:
- Serve as primary ISSO supporting ATO, RMF, and continuous monitoring activities
- Develop and maintain ATO artifacts (SSP, POA&M, SAR, control narratives) aligned to NIST 800-53
- Ensure compliance with DISA STIGs and federal security standards
- Support audits and assessments, including evidence collection and vulnerability closure validation
- Own and operate Tenable platform and distributed Nessus scanners in an air-gapped environment
- Configure scan policies, audit files, credentials, repositories, and scan zones
- Execute and manage credentialed vulnerability scans, STIG compliance scans, port and discovery scans
- Manage offline plugin and audit content updates in accordance with air-gapped constraints
- Ensure full asset coverage, scan accuracy, and remediation tracking across all environments
- Generate and deliver vulnerability reports supporting ATO and DISA reporting requirements
- Analyze scan results to identify false positives, credential failures, and scan gaps
- Translate scan findings into POA&M entries and track remediation to closure
Requirements:
- US Citizenship required
- Secret Clearance Required
- Bachelor's degree preferred or Associate degree holder (technical field) with 6-8 years working experience in related fields desired
- Certifications Required: DD8750 -Security Plus or higher Security Certification (CISSP, CASP, etc)
- One or more of the following: AWS Certified Solution Architect, Microsoft Certified Azure Solution Architect, Google Certified Professional Cloud Architect
Nice to Have:
- Scripting (Python, Bash, PowerShell)
- Experience operating in classified or air-gapped environments
- Experience supporting DISA or other DoD customers
- Familiarity with eMASS and ATO documentation systems