Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 17 days ago

ISSO Mid

ASM Research229 open roles

Where
Ashburn, VA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowISSO MidASM Research · Ashburn, VA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ASM Research's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.3% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.3%7 days
  4. 17.6%14 days
  5. 34.3%30 days
  6. 43.5%60 days
This job: posted 17 days ago

The posting

The Information Systems Security Officer (ISSO) supports the overall information security posture of assigned Major Applications (MAs) and General Support Systems (GSSs) within the customer environment. This individual serves as the subject-matter expert and principal point of contact for all system security requirements on assigned FISMA systems, providing expert-level guidance and leadership in implementing, maintaining, and enforcing information security policies, standards, and methodologies in accordance with federal regulations and agency requirements.

  • Serve as the subject-matter expert and principal point of contact for security requirements on assigned FISMA systems (MAs, GSSs, and sub-systems/applications).
  • Complete and maintain system authorization packages (System Security Plans, Interconnection Security Agreements, Contingency Plans, POA&Ms, waivers, and exceptions) in the DHS FISMA system management tool supporting the NIST Risk Management Framework (RMF).
  • Ensure assigned systems are operated, maintained, and disposed of in accordance with NIST SP 800-37 Rev. 2, DHS 4300A Policy and Handbook, and agency Handbook 1400-05D.
  • Perform periodic security management activities and monthly audit log reviews for assigned FISMA systems, identifying and documenting security anomalies.
  • Obtain input from system administrators, security engineers, and system owners to document and track system weaknesses as POA&Ms; recommend and track corrective actions to remediation.
  • Support risk acceptance and waiver requests, system access request reviews, and endorsement/rejection determinations with documented justification.
  • Investigate and report security incidents to the Director, SOD and CSD ISSM, and ensure protective or corrective measures are initiated upon discovery of a security incident or vulnerability.
  • Review Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) and provide documented security feedback to system/business owners.
  • Lead, prepare materials for, and participate in meetings supporting system assessment and authorization, vulnerability/POA&M reviews, and internal and external audits.
  • Support the DHS Ongoing Authorization (OA) Program transition and maintenance activities for assigned systems.
  • Provide audit support and liaison services between auditors (e.g., OIG, annual IPA/KPMG audit) and agency CSD, including collection of artifacts and formulation of responses across FISMA, FISCAM, and OMB Circular A-123 areas.

Minimum Qualifications

  • Bachelor’s Degree in Computer Science or a related field or equivalent experience; Advanced Degree preferred.
  • Minimum 5 years of information security experience, including at least 5 years in a lead ISSO or similar leadership capacity on programs/contracts of comparable scope and complexity.
  • US Citizenship / No Dual

Other Job Specific Skills

  • Solid knowledge of FISMA, NIST, and the Risk Management Framework (RMF) methodology.
  • Experience with security authorization processes (Certification & Accreditation and Authorization to Operate) and the ability to develop associated documentation.
  • Strong understanding of security tools, hardware/software security implementation, communication protocols, and encryption techniques.
  • Proven ability to analyze security vulnerabilities, deliver comprehensive assessments, and develop effective remediation instructions.
  • Excellent written and verbal communication skills, with the ability to present complex security information clearly to technical and executive audiences.
  • Certified Information Systems Security Professional (CISSP) Preferred
  • Certified Information Security Manager (CISM) Preferred

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ASM Research's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ASM Research's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ASM Research's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.