Senior Information System Security Officer (ISSO)
C3EL
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
**CONTINGENT UPON CONTRACT AWARD**
Overview:
Job Title: Senior Information System Security Officer (ISSO)
Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust
Location: Washington, D.C.
(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)
Description:
C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as Operational Specialist for Splunk, ServiceNow, ConMon, vulnerability management, POA&M, and incident and change coordination, as well as being workstream lead and secondary backup for Lead ISSO duties.
Responsibilities will include, but not be limited to:
- Provide on-site cybersecurity and RMF sustainment support.
- Maintain traceability between ServiceNow remediation tickets and CSAM POA&M records.
- Analyze findings, validate false positives, and prioritize remediation using CVSS, CISA KEV, exposure, exploitability, and mission impact.
- Support notification, triage, CSAM context retrieval, Splunk verification, SitReps, RCA, corrective actions, and post-incident updates.
- Support CAB/CCB/ERB reviews, security impact analysis, artifact updates, and post-change verification.
- Track audit, penetration-test, and assessment findings through corrective action and evidence-supported closure.
- Maintain incident-response plans and support tabletop or functional exercises.
- Produce accurate, concise, and audit-ready Government cybersecurity documentation.
- Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.
Minimum Qualifications:
- U.S. Citizenship.
- Eligibility to obtain a Tier 4 High-Risk Public Trust.
- Minimum seven (7) years of cybersecurity.
- Minimum five (5) years in federal ISSO, ConMon, vulnerability, security operations, or compliance work.
- Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
- Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
- Direct experience with Splunk searches, dashboards, ingestion verification, log coverage, and incident timeline support.
- Direct experience with ServiceNow incidents, problems, changes, remediation tickets, and reporting.
- Direct experience with Tenable Nessus, Qualys, ACAS, or comparable Government-approved scanners.
- Experience with Defender, Intune, BigFix, or equivalent endpoint and configuration platforms.
Preferred Qualifications:
- At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC.
Education:
- Associate’s degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)
About this role
C3EL is hiring a Senior ISSO for on-site work in Washington, D.C., supporting cybersecurity and Risk Management Framework sustainment for a federal client. This is a contract role contingent on award, requiring U.S. citizenship and eligibility for a Tier 4 High-Risk Public Trust clearance. You would serve as the operational specialist across multiple security platforms—Splunk, ServiceNow, ConMon, and vulnerability management—while also acting as workstream lead and backup for the Lead ISSO.
Your day-to-day work centers on RMF and incident management: analyzing vulnerability findings to prioritize remediation, maintaining traceability between ServiceNow tickets and POA&M records, supporting incident response and change control boards, and tracking assessment findings through closure. You'll produce government-ready documentation, manage incident-response plans, and provide coverage from 7 a.m. to 6 p.m. ET weekdays, with on-call participation for after-hours incidents.
The role demands at least seven years in cybersecurity and five years in federal ISSO, ConMon, vulnerability, or compliance work. You need hands-on experience with Splunk, ServiceNow, and government-approved scanners like Nessus, Qualys, or ACAS, plus solid knowledge of NIST frameworks, FISMA, and CISA guidance. Familiarity with endpoint platforms like Defender or Intune, and GRC/SIEM tools, is expected. A current cybersecurity certification (CISSP, CISM, Security+, or equivalent) is preferred, and an associate's degree in cybersecurity or IT is required unless relevant experience substitutes.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Information System Security Officer (ISSO) postings in Washington, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.