Cleared On Site Mid-Level Information Systems Security Officers (ISSO) (5358)

SMX is seeking a highly motivated Information System Security Officer (ISSO) – Mid to support a mission-critical federal program in Washington, DC.

Requirements

of enterprise information systems and applications. The selected candidate will act as a trusted advisor to System Owners (SOs), Business Process Owners, Information System Security Managers (ISSMs), and cybersecurity leadership on matters related to information system security, risk management, and regulatory compliance.

while supporting mission objectives. This position is on site in Washington, DC and requires an active TS/SCI clearance.

are incorporated throughout the system lifecycle Support Authorization to Operate (ATO) activities and ongoing authorization maintenance efforts Conduct security reviews and assessments to validate implementation and effectiveness of security controls Assist in the identification, documentation, tracking, and remediation of security findings and vulnerabilities Review and validate user access controls, privileged accounts, hardware inventories, software inventories, and system configurations Support audit activities, compliance reviews, and cybersecurity inspections Provide guidance regarding physical and logical protection of information system assets Develop reports, metrics, and recommendations related to system security posture and compliance status Recommend improvements to security processes, procedures, and operational controls Support incident response, security investigations, and remediation activities as required Required Skills Experience Active TS/SCI clearance required Minimum of 5 years of professional experience supporting cybersecurity, information assurance, RMF, or information system security activities Experience serving as an ISSO, cybersecurity analyst, security engineer, or related security role within a federal environment Experience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processes Experience developing and maintaining SSPs, POA Ms, security control documentation, and related authorization artifacts Familiarity with NIST 800-53, NIST 800-37, FISMA, and federal cybersecurity

Experience implementing and assessing security controls within enterprise information systems Experience supporting vulnerability management, remediation tracking, and continuous monitoring activities Knowledge of access control management, security documentation, and compliance reporting Strong analytical, troubleshooting, and problem-solving skills Ability to assess risks and recommend practical security solutions Strong written and verbal communication skills Ability to work independently while managing multiple priorities in a fas

Responsibilities

: Serve as a primary cybersecurity advisor to System Owners (SOs), Business Process Owners, and ISSMs on matters related to information system security Support implementation, maintenance, and continuous improvement of security controls across enterprise systems and applications Assist with Risk Management Framework (RMF) activities including system categorization, security control implementation, assessment support, and continuous monitoring Develop, maintain, and update security documentation including System Security Plans (SSPs), POA Ms, security procedures, and supporting authorization artifacts Monitor system security posture and identify risks, vulnerabilities, and compliance gaps requiring remediation Coordinate with engineers, system administrators, developers, and security personnel to ensure security