Information System Security Officer

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Professional Suwanee, GA, US

Job Description

Future Technologies is seeking a full-time Information System Security Officer (ISSO) to provide cybersecurity and Information Assurance support to a U.S. Army customer in Huntsville, Alabama. The ISSO will support Department of Defense Risk Management Framework (RMF) activities from system categorization and security-control implementation through assessment, authorization, and continuous monitoring. The position requires hands‑on experience developing and maintaining RMF packages, managing records in the Enterprise Mission Assurance Support Service (eMASS), conducting vulnerability and compliance assessments, and supporting systems across classified and unclassified environments.

Representative work would be:

• Support the full DoD RMF lifecycle, including system categorization, security‑control implementation, assessment, authorization, and continuous monitoring.
• Develop and advise on RMF packages, strategies, and technical components that comply with NIST SP 800‑53 security controls and applicable NISPOM, DoD, DISA, and Army cybersecurity requirements.
• Create and maintain System Security Plans, Plans of Action and Milestones, system diagrams, system user guides, privileged user guides, and other authorization artifacts.
• Enter, update, maintain, and track cybersecurity records and supporting evidence in eMASS.
• Identify system vulnerabilities and recommend security controls that mitigate or eliminate identified risks.
• Conduct or support vulnerability and security‑compliance assessments using ACAS/Nessus, SCAP Compliance Checker, STIG Viewer, Evaluate‑STIG, or equivalent approved tools.
• Analyze assessment results, document security deficiencies, support remediation activities, and maintain evidence that demonstrates compliance.
• Track security updates for Windows and Linux operating systems, VMware products, and associated software applications.
• Review system audits, identify deficiencies during RMF assessment activities, and monitor corrective actions through closure.
• Integrate security tools, system documentation, and other artifacts to improve compliance reporting and program efficiency.
• Prepare a monthly status report that summarizes significant activities and accomplishments.
• Coordinate with system owners, cybersecurity personnel, engineers, assessors, program leaders, and government stakeholders to resolve security issues and advance authorization activities.

Roles and Responsibilities:

• Information System Security Officer:
  Execute day‑to‑day ISSO responsibilities for assigned systems and networks.
• RMF and eMASS Support:
  Develop, maintain, and advance authorization packages while preserving complete and accurate compliance evidence.
• Assessment and Remediation Support:
  Conduct security assessments, document findings, recommend mitigations, and track corrective actions through closure.
• Customer and Program Support:
  Communicate security status, risks, requirements, and accomplishments to technical and program stakeholders.

Skills and Requirements:

• Bachelor's degree in a related field or at least seven years of directly relevant experience.
• At least five years of cybersecurity or Information Assurance experience, including demonstrated RMF and ISSO experience.
• Demonstrated experience supporting DoD RMF activities and obtaining and maintaining Authorizations to Operate.
• Demonstrated hands‑on experience entering data, maintaining records, and navigating eMASS.
• Experience conducting vulnerability and security‑compliance scans with ACAS/Nessus, SCAP Compliance Checker,…