Information System Security Officer; ISSO

Information System Security Officer (ISSO)

This is a U.S. based position. All of the programs we support require U.S. citizenship to be eligible for employment. All work must be conducted within the continental U.S.

Raft ( ) is a customer-obsessed small business focused on Distributed Data Systems, Platforms at Scale, and Complex Application Development, headquartered in McLean, VA. We build digital solutions for federal and public agencies, impacting millions of Americans.

As an ISSO, you will manage the security aspects of cutting‑edge platforms and systems, generating and maintaining artifacts to achieve and sustain Authority to Operate (ATO). You will collaborate with the development team to integrate security controls early in the lifecycle, audit and monitor all platforms and tooling across the customer environment, and ensure compliance with federal cybersecurity principles and DoD requirements.

• Minimum 4 years' experience in ISSM/O roles and obtaining/maintaining ATO for classified DoD cloud systems (RMF, NIST 800‑53 Rev 4/5, 800‑37, 800‑60).
• Skilled in crafting eMASS packages, implementing DISA STIGs, and conducting risk assessments, audits, and compliance monitoring within DoD environments.
• Proficient in managing Body of Evidence artifacts (BOE), POA&Ms, SSPs, RARs, Vulnerability Assessments, Security Assessment Plans.
• Experience with SIEM tools (Splunk, Grafana, ELK) and continuous monitoring activities (auditing, configuration reviews, policy & procedure reviews).
• Managing compliance activities for on‑prem and cloud‑based (AWS) systems & networks; leading programs/projects in attaining ATO; internal self‑assessments and externals audits.
• In‑depth understanding of Network Rules, Platforms, Application development, cloud‑native scalable services, and cybersecurity tools (vulnerability & compliance scanners, anti‑malware, code analyzers, IDS/IPS, DLP, SBOM).
• Building and maintaining Standard Operating Procedures.
• Obtaining Security+ or DoD 8570 IAT Level II or higher certification within 6 months.
• Highly preferred
  :
  Bachelor’s degree in Cybersecurity, Information Assurance, or IT; CISSP, CISM, CISA, CGRC, or other DoD 8570 IAM Level 2+; experience in a K8s Dev Sec Ops  environment (Platform One); FIPS; RMF control policy writing;
  Executive leadership (PMO);
  Cloud platform migrations; prior Solution Architect; engineering background; software factory setting.

• Active Secret with the ability to obtain and maintain a Top Secret security clearance.

• May require up to 35% travel to CONUS and OCONUS locations; must possess a valid, active U.S. passport with at least six months validity beyond intended period of employment.

• $180,000 – $220,000; compensation based on experience, skill, and proven abilities.

• Highly competitive salary.
• Fully covered healthcare, dental, and vision.
• 401(k) and company match.
• Take as you need PTO + 11 paid holidays.
• And more.

We’re an equal‑opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.