Information Systems Security Officer (ISSO)

Remote. Posted 4 days ago

The role

You will execute the RMF lifecycle and maintain authorization packages in DoD IL4/IL5 environments. You will manage continuous monitoring operations and ensure security posture for Game Warden and supporting systems.

What you will do

Execute all phases of NIST SP 800-37 DoD RMF lifecycle
Own eMASS authorization packages end-to-end
Manage DISA PPSM registrations
Author System Security Plans, control implementation narratives, and Plans of Action & Milestones
Drive continuous monitoring operations including POA&M updates and vulnerability reporting
Validate STIG compliance and analyze vulnerability scan results from ACAS/Tenable Nessus
Serve as technical point of contact for ISSMs, assessors, and Authorizing Officials
Partner with Product and Engineering to map cloud-native controls to DoD RMF and NIST 800-53 requirements

Required qualifications

3–5 years hands-on DoD cybersecurity, RMF authorization, or information assurance experience
Direct ISSO or equivalent compliance role supporting DoD ATO packages
Proficiency building and maintaining authorization packages in eMASS
Working knowledge of DISA PPSM registration, ports, protocols, services process, CAL, and boundary/data-flow documentation
Strong practical knowledge of NIST 800-53 (Rev 4/5), NIST 800-37 RMF, and DoD-specific implementation guidance
Familiarity with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, DISA Cloud Computing SRG, and continuous monitoring standards
Solid understanding of modern cloud environments (AWS, containers, Kubernetes, CI/CD)
Strong written communication skills
Active U.S. Secret security clearance
DoD 8570/8140 IAM Level I or IAT Level II baseline certification (Security+, CISSP, or equivalent) required or obtainable within 90 days
U.S. citizenship

Benefits

100% employer-paid medical, dental, and vision coverage for you and your dependents
401(k) with a 3% company contribution
Comprehensive wellness benefits including One Medical membership, mental health resources, and family planning support
Equity incentive plan
New hire technology and home office stipend
Annual professional development stipend
Flexible paid time off plus all federal holidays
Generous parental leave
Flexible remote work opportunities
Employee referral bonus program

Before you apply

Must reside in DC/Maryland/Virginia or Denver/Colorado Springs, CO
Active U.S. Secret security clearance required
U.S. citizenship is required

About the company

Second Front Systems (2F) is a public-benefit software company powering software for the free world. They eliminate friction to enable faster, more secure development and deployment of software across government and regulated networks.