Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 36 minutes ago

Senior Information System Security Officer (ISSO)

ECS FEDERAL LLC278 open roles

Pay
$170,000 – $200,000 a year
Where
FAIRFAX, VA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Information System Security Officer (ISSO)ECS FEDERAL LLC · FAIRFAX, VA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ECS FEDERAL LLC's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. ECS FEDERAL LLC postings stay open a median of 7 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: first seen 36 minutes ago

ECS FEDERAL LLC median: 7 days open

The posting

Everforth ECS is seeking an experienced Senior Information System Security Officer (ISSO) to work in a hybrid capacity at our Fairfax, VA office.

The Sr. ISSO will support the development, authorization, and ongoing cybersecurity compliance of Jupiter, a newly established DISA IL5 AWS environment containing CUI. The environment will house multiple U.S. Coalition Mission Partner Environments (MPEs).

This position is a demanding, high energy role that requires strong cybersecurity judgement, attention to detail, and the ability to lead day-to-day RMF and authorization activities for a new environment being built from the ground up. The Sr. ISSO will work closely with the Sr. ISSM, technical teams, and government cybersecurity team to prepare the environment for an Interim Authorization to Test (IATT) and ultimately an Authorization to Operate (ATO).

The ideal candidate has extensive ISSO experience supporting DoW programs and a strong working knowledge of RMF, NIST 800-53 controls, DISA STIGs, eMASS, POA&M management, and security authorization documentation. The candidate should be technically capable of independently evaluating DTO’s, CTO’s, CVE’s and other cybersecurity directives, reviewing control evidence and scan results, identifying compliance gaps, and working directly with technical teams to validate and remediate cybersecurity findings. Experience supporting AWS DoW environments is strongly preferred. The Sr. ISSO will provide guidance to other cybersecurity personnel and reports to the Senior Information System Security Manager.

Job Responsibilities:

  • Lead RMF activities for the AWS IL5 environment throughout system development, IATT, ATO, and continuous monitoring, including security assessments, audit readiness, and authorization package updates.
  • Develop, review, and maintain authorization artifacts, including security plans, control implementation evidence, vulnerability documentation, diagrams, inventories, risk documentation, policies, procedures, and SOPs.
  • Maintain eMASS records, including control implementation details, artifacts, assessment results, POA&Ms, risk documentation, and continuous monitoring evidence.
  • Coordinate with technical teams to collect, review, and validate security control evidence.
  • Review and validate DISA STIG artifacts and supporting evidence, including checklists, scan results, remediation evidence, mitigations, and closure documentation.
  • Analyze ACAS results to validate vulnerabilities, credentialed scan status, plugin output, remediation guidance, and scan coverage.
  • Develop, maintain, and track POA&Ms for vulnerabilities, STIG findings, control deficiencies, assessment findings, and other identified cybersecurity risks.
  • Evaluate DTOs, CTOs and other cybersecurity directives to determine potential impact to Jupiter and coordinate required validation or remediation activities.
  • Work with engineering and cybersecurity teams to validate vulnerabilities and security findings, track remediation, coordinate rescans, and maintain supporting vulnerability and closure documentation.
  • Review the cybersecurity impact of new AWS services, applications, Kubernetes workloads, software packages, architecture changes, and system changes and ensure associated authorization documentation remains current.
  • Support and coordinate security control assessments, assessor requests, evidence reviews, findings resolution, and other activities required to prepare and maintain the system for authorization.
  • Support development and execution of the continuous monitoring program, including recurring control reviews, vulnerability and STIG status, POA&M management, artifact updates, and security metrics.
  • Serve as a senior cybersecurity POC for RMF, authorization, compliance, and assessment activities with program and government stakeholders.
  • Provide guidance to other cybersecurity personnel and mentorship to junior staff.
  • Other duties, as assigned.

Salary: $170,000-200,000

General Description of Benefits

  • U.S. Citizen.
  • Ability to obtain Secret clearance (active preferred)
  • Active DoD 8140 IAT Level II Security+ (or higher) active.
  • Ability to work up to 3 days a week in a hybrid capacity out of Fairfax, VA. Additional onsite support may be required based on operational or mission needs.
  • Minimum 8 years of relevant cybersecurity experience, including significant experience supporting DoW information systems, RMF, security authorization, and continuous monitoring activities.
  • Direct experience with RMF, NIST SP 800-53, eMASS, authorization packages, control implementation documentation, POA&Ms, and continuous monitoring activities.
  • Experience with the following: Leading or supporting security control assessments, assessor evidence requests, findings resolution, and authorization package reviews. Analyzing ACAS results, including credentialed scan status, plugin output, scan coverage, remediation guidance and closure evidence. Reviewing and validating DISA STIGs, security configuration evidence, remediation documentation, mitigations, and closure evidence.
  • Working knowledge of AWS security and compliance concepts, including shared cloud responsibility, inherited controls, identity and access management, logging, network security, and security control implementation within cloud environments.
  • Practical understanding of AWS, Kubernetes, Linux, Windows, Entra ID/Active Directory, networking, authentication, endpoint security, logging, and monitoring, with the ability to evaluate how these technologies affect the system's security and authorization posture.
  • Ability to: Develop and maintain cybersecurity documentation including System Security Plans, control implementation statements, POA&Ms, risk documentation, policies, procedures, SOPs, and continuous monitoring artifacts. Analyze DTOs, CVEs, cybersecurity directives, and vulnerability notifications and independently determine potential system exposure using ACAS/Nessus and other available technical information. Work directly with cloud, system, network, and application engineers to validate technical security controls, investigate findings, determine remediation approaches, and collect sufficient evidence to support RMF requirements. Translate technical vulnerabilities and control deficiencies into clear mission and cybersecurity risk statements for ISSMs, system owners, government stakeholders, and Authorizing Officials.
  • Strong analytical, problem solving, technical writing, and verbal communication skills, with the ability to independently investigate cybersecurity issues and communicate effectively with both technical and non-technical stakeholders.
  • Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
  • Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ECS FEDERAL LLC's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ECS FEDERAL LLC's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ECS FEDERAL LLC's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.