Talent.com
Peraton
Information Systems Security Officer (Technical ISSO / RMF Assessor)Peraton • Herndon, Virginia, United States
Information Systems Security Officer (Technical ISSO / RMF Assessor)

Information Systems Security Officer (Technical ISSO / RMF Assessor)

Peraton • Herndon, Virginia, United States
30+ days ago
Salary
$112,000.00 yearly
Job type
  • Full-time
Job description
Responsibilities

Job Summary

We are seeking a highly skilled and technically proficient Information Systems Security Officer (ISSO) with hands-on experience developing, implementing, and validating security controls within DoD RMF environments. This role requires deep technical understanding of NIST SP 800-53 controls, STIG implementation, vulnerability analysis, and the ability to produce assessable, audit-ready security documentation.

The ideal candidate will be confident writing Security Test Procedures (STPs), building Security Controls Traceability Matrices (SCTMs), interpreting ACAS/Nessus scan results, and using Splunk to verify control effectiveness. This ISSO will work closely with system owners, engineers, and government stakeholders to support ATO efforts and continuous monitoring activities.

Duties & Responsibilities:

Core Technical Responsibilities
  • Develop, write, and maintain Security Test Procedures (STPs) for NIST SP 800-53 controls.
  • Create and update Security Controls Traceability Matrices (SCTMs).
  • Draft, review, and refine control implementation statements for all control families.
  • Interpret and remediate STIG/SCAP findings across operating systems, applications, and infrastructure.
  • Conduct and analyze ACAS/Nessus vulnerability scan results; validate findings with engineering teams; track remediation to closure.
  • Perform Splunk log analysis to validate control operation and investigate anomalies.
  • Prepare and update core ATO documentation including SSPs, SARs, POA&Ms, Contingency Plans, Continuous Monitoring artifacts, and other related Body of Evidence (BoE) components.
RMF & Security Lifecycle
  • Lead and support RMF Steps 1-6 for assigned systems.
  • Manage, validate, and maintain control evidence in alignment with NIST SP 800-53 and DoD requirements.
  • Support continuous monitoring activities, including log review, vulnerability assessments, and control re-validation.
  • Coordinate directly with system owners and engineering teams to address security gaps.
  • Ensure system documentation is maintained accurately and entered in tools such as Xacta or eMASS.
  • Provide security guidance for system changes, risk assessments, and configuration updates.
Collaboration & Stakeholder Support
  • Communicate technical risks, findings, and required actions to system owners, government counterparts, and internal leadership.
  • Participate in security meetings, assessments, and audits.
  • Assist with incident response activities as needed, including log review and security control validation.

Qualifications

Required Qualifications
  • Active TS clearance with SCI eligibility OR TS/SCI clearance adjudication with current polygraph OR the ability to pass a polygraph.
  • Bachelor's degree in a relevant technical field with 8+ years of relevant experience, or 12+ years of experience in lieu of a degree.
  • 8+ years of hands-on experience as an ISSO, ISSE, Assessor, Security Engineer, or closely related DoD cybersecurity role.
  • Demonstrated experience writing STPs, creating SCTMs, and developing implementation statements.
  • Hands-on experience performing STIG interpretation and remediation.
  • Experience reviewing and validating ACAS/Nessus vulnerability scan results.
  • Ability to use Splunk (or similar SIEM) to validate security controls and investigate anomalies.
  • Direct experience authoring ATO documentation (SSP, SAR, POA&M, etc.).
  • Strong working knowledge of NIST SP 800-53, RMF, and DoD cybersecurity requirements.
  • Experience using Xacta or eMASS to manage RMF artifacts.
  • DoD 8570 IAM-II compliant certification (e.g., Security+, CISSP, CISM).
  • Strong written and verbal communication skills with the ability to explain technical topics clearly.
Desired Qualifications
  • Experience as a Security Control Assessor (SCA) or assessor support.
  • Familiarity with FISMA, FISCAM, and federal audit requirements.
  • Experience supporting cloud environments (AWS GovCloud preferred).
  • Experience with automation or scripting to support security tasks.
  • Strong understanding of Zero Trust principles.
  • Experience supporting SAP/SAR or other high-side environments.

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.All
Create a job alert for this search

Information Systems Security Officer (Technical ISSO / RMF Assessor) • Herndon, Virginia, United States

Similar jobs

Information Systems Security Manager ISSM (Engineer Info Assurance 5)

HII Mission Technologies divisionFairfax, VA, United States
Full-time

Information Systems Security Manager ISSM (Engineer Info Assurance 5).HII's Mission Technologies division is currently seeking a SME Information System Security Manager (ISSM) to work out of Fairfa... Show more

 • Promoted

Senior Information Systems Security Officer (ISSO)

ClearanceJobsAshburn, VA, United States
Full-time

Senior Information System Security OfficerAkima Global Technology (AGT) is looking for a Senior Information System Security Officer to work in Ashburn, Virginia.To join our team of outstanding prof... Show more

 • Promoted

Senior Information System Security Officer

MANTECHChantilly, VA, United States
Full-time

Senior Information System Security Officer (ISSO).Responsibilities include, but are not limited to:.Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the se... Show more

 • Promoted

Information Systems Security Manager II

AmyxSpringfield, VA, United States
Full-time

Information Systems Security Manager-Advanced.Amyx is seeking to hire an Information Systems Security Manager-Advanced to support our Cybersecurity Division in the NCE Springfield, VA area.Responsi... Show more

 • Promoted

Information Assurance and Security, Senior Advisor

PeratonMcLean, VA, United States
Full-time

Information Assurance and Security, Senior AdvisorJob LocationsUS-VA-McLeanRequisition ID2026-164083Position CategoryCyber SecurityClearanceTop Secret/SCI w/PolyResponsibilitiesPeraton is seeking a... Show more

 • Promoted

Cloud Information Systems Security Engineer (ISSE)

Rapid Cycle Solutions, LLCChantilly, Virginia, United States
Full-time
Quick Apply

Minimum Clearance Required: TS/SCI with CI Poly.Rapid Cycle Solutions LLC (RCS) is an innovative small business providing IT and management consulting services to the U.Federal Government and comme... Show more

Information System Security Engineer

NASWoodbridge, VA, US
Full-time +1

I have direct hire onsite Senior Information System Security Engineer positions in Woodbridge Virginia.The hiring company provides tailored cybersecurity, artificial intelligence, systems engineeri... Show more

 • Promoted

CISO, Federal Health Cloud Security Leader (Remote)

General Dynamics CorporationFalls Church, VA, United States
Remote
Full-time

A technology and professional services firm is seeking a Chief Information Security Officer for its Veterans Affairs Business Area to improve service delivery.The candidate will lead a team, develo... Show more

 • Promoted

Information Systems Security Manager (ISSM)

CymertekMc Lean, VA, United States
Full-time

Information Systems Security Manager (ISSM).We are looking for an experienced and dedicated Information Systems Security Manager (ISSM) to join our team and lead efforts to secure and protect our i... Show more

 • Promoted

Information Security Director (ISD)

Redgrave LLPChantilly, VA, United States
Full-time

Information Security Director Opportunity.Redgrave LLP is seeking an Information Security Director to lead, mature, and scale a comprehensive, enterprise-wide information security program.This is a... Show more

 • Promoted

ISSO Security Analyst

American Management Group, LLC (AMG)Manassas, VA, US
Full-time

Position Title: ISSO Security Analyst (SSA) Core Hours: 8:30am - 4:30pm EST As a Security Analyst on our team, you’ll use your experience to work with Veterans Affairs (VA) Information System Owner... Show more

 • Promoted

ISSE Lead | TS/SCI w/ Poly | Cyber Security & A&A Expert

SAICMcLean, VA, United States
Full-time

A leading technology integrator is seeking an Information System Security Engineer to support critical information security operations in McLean, VA.The role involves overseeing the A&A process, de... Show more

 • Promoted

Information System Security Manager (ISSM) - Level 4

Virtual Service OperationsLorton, VA, United States
Full-time

Information System Security Manager (ISSM) Level 4.Are you looking to take the next step in your career as an Information System Security Manager (ISSM) Level 4? Let's chat and see if we're a goo... Show more

 • Promoted

Information Systems Security Management (ISSM) - TS/SCI w/Polygraph

General DynamicsMc Lean, VA, United States
Full-time

Information Systems Security Management (ISSM).Seize your opportunity to make a personal impact as an Information Systems Security Management supporting customer activities.GDIT is your place to ma... Show more

 • Promoted

ISSO Security Analyst

Booz Allen HamiltonMc Lean, VA, United States
Full-time +1

As a security analyst on our team, you'll use your experience to work with Veterans Affairs (VA) Information System Owners (ISO), Information System Security Officers (ISSO), site managers, and oth... Show more

 • Promoted

Director of Information Security

AeroVironmentHerndon, VA, United States
Permanent

Director Of Information Security.Company Overview AV is a leading defense technology company delivering mission-critical solutions to government and commercial customers.We are seeking an experienc... Show more

 • Promoted

Senior Information System Security Officer

ManTechChantilly, VA, United States
Full-time

MANTECH seeks a motivated, career and customer-oriented Senior Information System Security Officer (ISSO) to join our team in Chantilly, VA.Responsibilities include, but are not limited to:Ensure t... Show more

 • Promoted

Fully Remote Information Security Analyst

Zachary PiperMcLean, VA, United States
Remote
Full-time

Zachary Piper Solutions is seeking a Fully Remote Information Systems Engineer to work hybridout of Camp Springs, MD.The Fully Remote Information Systems Engineer is responsible for assessing secur... Show more

 • Promoted

Information Systems Security Manager (ISSM)

AalyriaChantilly, VA, United States
Full-time +1

Information Systems Security Manager (ISSM).Aalyria Technologies is seeking a highly experienced Information Systems Security Manager (ISSM) to lead the accreditation, operation, and sustained comp... Show more

 • Promoted

Senior Information Security Office (ISO) Consultant, Cyber Risk

Capital OneMc Lean, VA, United States
Full-time +1

Senior Information Security Office (ISO) Consultant, Cyber Risk.Capital One is one of the fastest growing organizations in the world today.The growth of the business is being accelerated by leverag... Show more