ISSO with Security Clearance

Responsibilities & Qualifications Core Role & Purpose The CSSP ISSO serves as the authoritative Risk Management Framework (RMF) and compliance subject matter expert supporting the Defense Threat Reduction Agency (DTRA). This role acts as a critical validation bridge between the CSSP Protect Team and the CSSP's subscriber organizations. The ISSO will provide rigorous, specialized validation of cybersecurity artifacts against NIST 800-53 Rev 5 controls requirements to ensure accurate, continuous authorization and risk mitigation from all CSSP subscriber organizations.

Required Responsibilities
* Artifact Validation & Quality Assurance:
Serve as the final layer of validation for RMF artifacts (e.g., Authorization Boundary Diagrams, HW/SW Lists, Credentialed Scans, SSPs, POA&Ms, SARs, SAPs) collected by Protect Analysts from CSSP subscribers, ensuring all evidence accurately satisfies operational directives.
* NIST 800-53 Rev 5 Subject Matter Expertise:
Map collected artifacts and subscriber security implementations directly to NIST 800-53 Rev 5 control families, ensuring compliance with federal baseline security standards.

* Cross-Functional Collaboration:

Partner closely with CSSP Protect Analysts to translate complex RMF requirements into actionable data-collection requests, bridging the gap between technical cybersecurity operations and formal governance/compliance requirements.
* Continuous Monitoring Validation:
Cross-reference technical vulnerability scan data (ACAS, SCAP, HBSS findings) against subscriber-provided artifacts to ensure that active system weaknesses are accurately documented in current POA&Ms.
* eMASS Package Maintenance:
Verify, review, and assist in managing security control baselines and validation evidence directly within the Enterprise Mission Assurance Support Service (eMASS) database for all subscriber enclaves.
* Risk Assessment & Mitigation:
Evaluate subscriber POA&Ms for accuracy, feasibility, and appropriate risk scoring. Provide clear, actionable feedback to the Protect team and subscribers when artifacts fall short of compliance standards.
* Audit Readiness & Documentation:
Work closely with the CSSP Auditor in maintain highly organized, audit-ready repositories of validated artifacts to support JFHQ-DoDIN operational directives and overarching CSSP Evaluator Scoring Metric (ESM) assessments.

Required Qualifications
* Clearance:
Active Top-Secret Clearance with SCI eligibility required.
* DoD 8570/8140 Certification:
* DoD 8570/8140 IAM Level III
* DoD 8570/8140 CSSP Auditor equivalent certification

* Experience:

3-8 years of progressive experience in Information Assurance, RMF, and NIST compliance. 2-5 Years working in a SOC or CSSP environment.
* Technical Expertise:
Extensive, hands-on experience with NIST SP 800-53 (Rev 5 preferred) and DoD RMF processes.

* Education:

BA/BS College degree required. Overview We are seeking an ISSO to join our Prime Contract with the Defense Threat Reduction Agency. Tek Synap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. "Technology moving at the speed of thought" embodies these principles - the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at  . Apply now to explore jobs with us! The safety and health of our employees is of the utmost importance. Employees are required to comply with any vaccination requirements mandated by contract, applicable law or regulation.

By applying to a role at Tek Synap you are providing consent to receive text messages regarding your interview and employment status. If at any time you would like to opt out of text messaging, respond "STOP". As part of the application process, you agree that Tek Synap Corporation may retain and use your name, e-mail, and contact information for purposes…