VETS, Inc., is looking to add a mid-level (3-5 years experience) Information Systems Security Officer (ISSO) to our growing team. This is a full-time, permanent position with full benefits located at Scott AFB. Due to contractual requirements, this position required US Citizenship and a current/active DoD Clearance. The successful candidate will: Own the day-to-day security authorization posture of assigned DoD information systems Work within a well-resourced team with dedicated engineering, operations, and architecture support Develop expertise in modern RMF tooling including eMASS and eMASSer automation Directly support mission continuity by managing ATO packages and continuous monitoring programs Grow into a senior GRC role with clear advancement pathways Responsibilities Develop, maintain, and update System Security Plans (SSPs) for assigned systems Manage POA&Ms from identification through remediation and closure Compile and submit Authorization to Operate (ATO) packages Conduct continuous monitoring activities per established strategy Utilize eMASS for GRC management and RMF workflow tracking Coordinate with ISSEs and SecOps to validate control implementations Develop Security Assessment Plans (SAPs) and support SAR coordination Draft supply chain risk management plans Support the Cybersecurity Architect with RMF strategic planning Required: Active Secret or TS clearance 35 years of RMF/ATO experience within DoD or federal environments Hands-on experience with eMASS Working knowledge of NIST SP 800-53r5 and DoD RMF processes Demonstrated ability to independently author SSPs and manage POA&Ms DoD 8140.03M DCWF Basic tier certification CEH DoD 8140 Interim Education Options Desired DoD 8140.03M DCWF Intermediate tier certification one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+ Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering Experience with eMASSer or similar RMF automation tooling Exposure to cloud-hosted or hybrid system authorization boundaries Familiarity with the DoD RMF Knowledge Service
Not specified in the original listing.
Not specified in the original listing.
