Cybersecurity Specialists, ISSOs TSA GRCSS Program

Location: Remote
Clearance Requirement: Secret clearance and will need to get a DHS suitability
Employment Type: Full-Time

Disruptive Solutions, a Service-Disabled Veteran-Owned Small Business (SDVOSB) delivering mission-focused cybersecurity and technology solutions for federal and commercial clients. We specialize in advanced cybersecurity operations, AI/ML integration, cloud modernization, data governance, and risk management. With a proven track record supporting agencies like the Department of Defense (DoD), Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Treasury, we deliver innovative solutions that maximize efficiency and strengthen cyber resilience.

At our core, we are dedicated partners committed to securing the mission with innovation, integrity, and measurable impact.

Disruptive Solutions is seeking cybersecurity professionals at multiple experience levels to support current and upcoming requirements on the TSA Governance, Risk, Compliance, and Security Services (GRCSS) program. These positions will support TSA's enterprise cybersecurity mission across a broad range of security disciplines, including Zero Trust, Security Control Assessment (SCA), Governance, Risk and Compliance (GRC), ISSO support, cybersecurity engineering, vulnerability assessment, and penetration testing.

• Support TSA cybersecurity governance, risk management, compliance, assessment, and security engineering activities across enterprise systems and environments.
• Support implementation and maturation of Zero Trust Architecture (ZTA) principles across identity, devices, networks, applications, workloads, and data.
• Conduct Security Control Assessments (SCA) and evaluate the implementation and effectiveness of security controls.
• Support the Risk Management Framework (RMF) lifecycle, including system authorization, continuous monitoring, security documentation, and remediation activities.
• Develop, review, and maintain cybersecurity documentation including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, and security policies and procedures.
• Provide ISSO support to system owners and technical teams throughout system development, authorization, operation, and continuous monitoring.
• Evaluate systems and architectures against applicable federal cybersecurity requirements, standards, and security controls.
• Perform cybersecurity engineering and architecture analysis to identify vulnerabilities, security gaps, and opportunities to strengthen system security.
• Conduct or support vulnerability assessments, penetration testing, security testing, and technical security evaluations of applications, systems, networks, and cloud environments.
• Analyze vulnerabilities and security findings, assess associated risk, and work with technical teams to develop appropriate remediation strategies.
• Support Governance, Risk and Compliance (GRC) activities, including risk tracking, compliance reporting, control validation, audit support, and cybersecurity metrics.
• Collaborate with security engineers, system administrators, developers, cloud engineers, ISSOs, assessors, and government stakeholders to integrate cybersecurity throughout the system lifecycle.
• Support continuous monitoring and ongoing authorization activities to ensure systems maintain an acceptable security posture.
• Provide cybersecurity recommendations and technical guidance to TSA stakeholders and leadership.

• Experience in one…