Information System Security Officer (ISSO)

Markon

. Own and drive the RMF process for assigned systems .

Posted 9/18/2026full-timeAnnapolis Junction • Maryland • United StatesMid-LevelSenior💰 $120,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in the Risk Management Framework (RMF) process, including the development and maintenance of System Security Plans (SSPs) and compliance with NIST SP 800-53 security controls. Proficient in technical writing, documentation, and customer communication, with a strong background in government security reviews and authorization processes.

Highest-signal resume keywords

Active TS/SCI ClearanceCompTIA Security+ CertificationDoD Risk Management Framework KnowledgeExperience with RMF/ATO DocumentationLinux/RHEL System Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

System Security Plans (SSPs)NIST SP 800-53 Security ControlsDISA STIGsPOA&Ms DevelopmentVulnerability ScanningCompliance DocumentationTechnical Control ImplementationContinuous MonitoringAuthorization DocumentationDocker or Kubernetes Experience

Soft Skills

Technical WritingCustomer-Facing Communication

Tools & Technologies

EMASSRHEL Systems

Certifications & Qualifications

CompTIA Security+

Industry Keywords

GRCDoDRisk Management FrameworkAuthorization to Operate (ATO)Continuous Monitoring

Tech Stack

Tools & technologies

DockerKubernetesLinuxTypeScript

About the role

Key responsibilities & impact

Own and drive the RMF process for assigned systems
Develop, maintain, and update System Security Plans (SSPs)
Support systems through ATO, reauthorization, and continuous monitoring
Interpret and document implementation of NIST SP 800-53 security controls
Work with DISA STIGs, findings, remediation, and compliance documentation
Prepare and maintain required RMF documentation and authorization artifacts
Gather and organize control implementation evidence
Identify documentation, control, and evidence gaps and coordinate their resolution
Develop and maintain POA&Ms and associated remediation documentation
Work with engineers and system administrators to understand and document technical control implementations
Support government security reviews and assessment activities
Communicate directly with government customers, assessors, technical teams, and other stakeholders
Maintain authorization documentation as systems and environments change

Requirements

What you’ll need

Active TS/SCI w/ Polygraph
CompTIA Security+ certification
Professional U.S. Government/DoD GRC and RMF experience
Demonstrated ability to independently develop, maintain, and own SSPs
Working knowledge of the DoD Risk Management Framework
Familiarity with NIST SP 800-53 security controls
Familiarity with DISA STIGs
Experience preparing RMF/ATO documentation, control evidence, and assessment artifacts
Experience supporting systems through authorization and/or continuous monitoring
Experience working with RHEL systems
Strong technical writing and documentation skills
Strong customer-facing communication skills
Experience serving as an ISSO or equivalent RMF/GRC role preferred
Docker, Kubernetes, or other container/container-orchestration experience is a major plus
Experience with eMASS preferred
Experience developing and managing POA&Ms preferred
Experience with DoD authorization packages and ATOs preferred
Experience reviewing or implementing DISA STIG requirements preferred
Experience with vulnerability and compliance scanning preferred
Linux/RHEL system administration experience preferred

Benefits

Comp & perks

Medical
Dental
Vision
Life Insurance
Short-Term Disability
Long-Term Disability
401(k) match
Flexible Spending Accounts
EAP
Training and Tuition Assistance
Paid Time Off
Holidays
Professional growth and development opportunities
Washington Post Top Workplace environment