(781) Cybersecurity Technical Specialist Level III / ISSO

The role

This person will provide technical expertise in DoD Risk Management Framework (RMF), security-control analysis, vulnerability management, eMASS, POA&M management, and Continuous Monitoring. They will support U.S. Army ATEC cybersecurity operations.

What you will do

• Execute assigned RMF responsibilities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army requirements.
• Analyze control implementations, technical configurations, compliance evidence, and deficiencies.
• Maintain assigned authorization packages, security controls, artifacts, findings, and supporting documentation.
• Review ACAS, SCAP, STIG, and other assessment results.
• Document weaknesses, track remediation milestones, validate corrective actions, and maintain supporting evidence.
• Conduct recurring security reviews, identify emerging risks, monitor compliance, and report material cybersecurity changes.
• Independently verify technical accuracy, completeness, evidence, and compliance before submitting deliverables.
• Report significant vulnerabilities, suspected incidents, and security deficiencies through authorized channels.
• Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders.
• Prepare and present accurate technical briefings covering RMF activities, vulnerabilities, security controls, POA&Ms, and Continuous Monitoring.

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Engineering, or related field; equivalent experience may qualify when permitted by contract.
• Demonstrated experience supporting DoD, U.S. Army, or federal cybersecurity programs.
• Hands-on experience performing ISSO, Risk Management Framework (RMF), information assurance, or equivalent cybersecurity responsibilities.
• Strong understanding of NIST SP 800-53 security controls, RMF processes, cybersecurity compliance, and authorization requirements.
• Experience reviewing security-control implementations, technical evidence, vulnerability findings, and cybersecurity documentation.
• Experience supporting authorization packages, Plans of Action and Milestones (POA&Ms), and Continuous Monitoring.
• Ability to independently analyze technical cybersecurity issues, validate findings, and produce accurate, defensible deliverables.
• Strong analytical, organizational, documentation, communication, and problem-solving skills.
• Knowledge and practical experience in DoD RMF: DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable DoD/Army cybersecurity requirements.
• Knowledge and practical experience in eMASS: Authorization-package maintenance, security-control documentation, implementation statements, assessment evidence, findings, and workflow support.
• Knowledge and practical experience in Vulnerability Management: ACAS assessments, DISA STIG compliance, SCAP scanning, technical findings analysis, and remediation validation.
• Knowledge and practical experience in POA&M Management: Vulnerability documentation, remediation tracking, milestone management, risk acceptance support, and evidence validation.

Nice to have

• Previous experience supporting U.S. Army, ATEC, NETCOM, or other DoD cybersecurity programs.
• Experience supporting enterprise information systems, network infrastructure, or mission-critical Government environments.
• Demonstrated ability to interpret and apply DISA STIG requirements and technical vulnerability assessment results.
• Experience supporting cybersecurity authorization or reauthorization efforts.
• Experience coordinating technical remediation activities with System Administrators and system engineering teams.
• Experience supporting Government inspections, cybersecurity assessments, or technical compliance reviews.
• Familiarity with enterprise vulnerability tracking, reporting dashboards, Microsoft Excel, Microsoft Lists, and other approved cybersecurity management tools.
• Experience developing technically defensible risk acceptance recommendations and supporting documentation.
• Additional operating-system, networking, vendor-specific, and cybersecurity certifications

Before you apply

• Must meet applicable U.S. citizenship requirements.
• Must possess or qualify for the required Government security clearance.
• Must satisfy U.S. Army Aberdeen Proving Ground installation access, identity verification, and credentialing requirements.
• Must reside within commuting distance of Aberdeen Proving Ground, Maryland, or be willing to self-relocate.

About the company

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Their mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions.