The ideal candidate brings a strong combination of ISSO oversight, hands-on vulnerability management, and secure cloud engineering experience, with the ability to operate in classified, disconnected environments.

Responsibilities:

• Serve as primary ISSO supporting ATO, RMF, and continuous monitoring activities
• Develop and maintain ATO artifacts (SSP, POA&M, SAR, control narratives) aligned to NIST 800-53
• Ensure compliance with DISA STIGs and federal security standards
• Support audits and assessments, including evidence collection and vulnerability closure validation
• Own and operate Tenable platform and distributed Nessus scanners in an air-gapped environment
• Configure scan policies, audit files, credentials, repositories, and scan zones
• Execute and manage credentialed vulnerability scans, STIG compliance scans, port and discovery scans
• Manage offline plugin and audit content updates in accordance with air-gapped constraints
• Ensure full asset coverage, scan accuracy, and remediation tracking across all environments
• Generate and deliver vulnerability reports supporting ATO and DISA reporting requirements
• Analyze scan results to identify false positives, credential failures, and scan gaps
• Translate scan findings into POA&M entries and track remediation to closure

Requirements:

• US Citizenship required
• Secret Clearance Required
• Bachelor's degree preferred or Associate degree holder (technical field) with 6-8 years working experience in related fields desired
• Certifications Required: DD8750 -Security Plus or higher Security Certification (CISSP, CASP, etc)
• One or more of the following: AWS Certified Solution Architect, Microsoft Certified Azure Solution Architect, Google Certified Professional Cloud Architect

Nice to Have:

• Scripting (Python, Bash, PowerShell)
• Experience operating in classified or air-gapped environments
• Experience supporting DISA or other DoD customers
• Familiarity with eMASS and ATO documentation systems

Job Data by YubHub.