Information Systems Security Officer – ISSO

Second Front Systems

. Execute all phases of the NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments .

Posted 11/9/2026full-timeRemote • United StatesMid-LevelSenior💰 $150,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in executing the NIST SP 800-37 DoD RMF lifecycle and managing eMASS authorization packages, with a strong focus on compliance and continuous monitoring in DoD IL4/IL5 environments. Proficient in cloud security controls related to AWS, containers, and Kubernetes, ensuring alignment with NIST 800-53 requirements.

Highest-signal resume keywords

NIST 800-53 ComplianceEMASS Authorization PackagesDoD Cybersecurity ExperienceDISA PPSM RegistrationAWS Security Controls

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

NIST SP 800-37DoD RMF LifecycleControl ImplementationVulnerability ReportingSTIG ComplianceACAS/Tenable NessusPlans of Action & MilestonesContinuous MonitoringCloud SecurityTechnical Documentation

Soft Skills

Strong Written Communication

Tools & Technologies

EMASSDISA STIG ViewerSCCIAVMKubernetesCI/CD

Certifications & Qualifications

U.S. Secret Security ClearanceDoD 8570/8140 IAM Level IIAT Level IISecurity+CISSP

Industry Keywords

DoD IL4/IL5Information AssuranceAuthorization to Operate (ATO)Boundary ArchitectureData Flows

Tech Stack

Tools & technologies

AWSCloudCyber SecurityKubernetes

About the role

Key responsibilities & impact

Execute all phases of the NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments
Own eMASS authorization packages end-to-end, including control implementation details, test results, artifacts, and continuous monitoring status
Manage DISA PPSM registrations and reconcile ports, protocols, services, data flows, CAL, and boundary architecture
Author System Security Plans, control implementation narratives, Plans of Action & Milestones, and supporting RMF artifacts
Drive continuous monitoring operations, including monthly POA&M updates, vulnerability and patch reporting, IAVM compliance, significant change reviews, and periodic assessments
Validate STIG compliance and analyze ACAS/Tenable Nessus vulnerability scan results, tracking remediation against NIST 800-53 and DoD requirements
Serve as technical point of contact for ISSMs, assessors, and Authorizing Officials during assessments, readiness reviews, and audits
Partner with Product and Engineering to map AWS, containers, Kubernetes, and CI/CD controls to DoD RMF and NIST 800-53 requirements
Maintain authorization packages and defensible evidence collection across accredited systems

Requirements

What you’ll need

3–5 years hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with direct ISSO or equivalent compliance role supporting DoD ATO packages
Demonstrated proficiency building and maintaining authorization packages in eMASS
Working knowledge of DISA PPSM registration, ports, protocols, services process, CAL, and boundary/data-flow documentation
Strong practical knowledge of NIST 800-53 (Rev 4/5), NIST 800-37 RMF, and DoD-specific implementation guidance
Familiarity with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, DISA Cloud Computing SRG, and continuous monitoring standards
Solid understanding of AWS, containers, Kubernetes, and CI/CD, and how cloud-native patterns map to technical security controls
Strong written communication skills to produce assessor-ready documentation and clear control narratives
Active U.S. Secret security clearance required
DoD 8570/8140 IAM Level I or IAT Level II baseline certification (Security+, CISSP, or equivalent) required or obtainable within 90 days
U.S. citizenship required
Must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, CO

Benefits

Comp & perks

Potential eligibility for equity awards
Discretionary bonuses
100% employer-paid medical, dental, and vision coverage for you and your dependents
401(k) with a 3% company contribution
Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
Equity incentive plan
New hire technology and home office stipend
Annual professional development stipend
Flexible paid time off, plus all federal holidays
Generous parental leave
Flexible remote work opportunities
Employee referral bonus program