USAF - ISSO in Linthicum Heights, Maryland at cFocus Software Incorporated

NewEmployment Type: Full-Time
cFocus Software Incorporated
Linthicum Heights, Maryland, 21090, United States
Posted on
New job! Apply early to increase your chances of getting hired.

Job Description

cFocus Software seeks a Information System Security Officer (ISSO) to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance.
Qualifications:
  • Active TS/SCI clearance
  • B.S. Computer Science, Information Technology, or a related field
  • Experience performing ISSO duties and developing or maintaining RMF authorization packages.
  • Experience preparing SSPs, assessment documentation, control evidence, and POA&Ms in eMASS.
  • Knowledge of security control assessment, continuous monitoring, STIG compliance, and vulnerability management.
  • Ability to evaluate security findings, coordinate remediation, and maintain accurate system risk records.
  • Understanding of authorization boundaries, configuration control, and security impacts of system changes.
  • Ability to work with system owners, ISSMs, engineers, assessors, and Government stakeholders.
  • Strong technical writing, evidence management, and communication skills for reviews and reporting
Duties:
  • Develop, maintain, and update Authorization to Operate (ATO) and Assess-Only Authorization packages for assigned DC3 systems.
  • Execute steady-state RMF activities for systems with valid authorizations, including ongoing security control assessments, STIG compliance, and remediation tracking.
  • Prepare initial System Security Plans (SSPs), support execution of Security Assessment Plans, and assemble authorization evidence for systems lacking an ATO.
  • Maintain complete, current system records in the Enterprise Mission Assurance Support Service (eMASS); resolve documentation and evidence gaps with technical teams.
  • Maintain system-level Plans of Action and Milestones (POA&Ms), track corrective actions and dependencies, and provide updates for enterprise consolidation by the ISSM.
  • Review vulnerability assessment and configuration compliance results; coordinate remediation, validate closure evidence, and identify overdue or unresolved findings.
  • Support continuous ATO (cATO) through automated compliance evidence and monitoring data in coordination with DevSecOps and operations personnel.
  • Assess assigned system changes for security and authorization impacts; maintain consistent boundaries, configurations, inventories, and supporting records.
  • Track applicable cyber orders, taskers, and directives; coordinate required system changes and prepare compliance documentation or POA&Ms when immediate compliance is not achievable.
  • Provide the ISSM with system risk information, remediation options, and supporting evidence for enterprise risk analysis and Government risk acceptance decisions.
  • Coordinate with system owners, assessors, engineers, and the ISSM to prepare packages for Government review and address review findings before planned deployment.
  • Support incident response by providing system security documentation, assessing control implications, and tracking directed corrective actions.
  • Maintain security procedures and assessment records; support audits and provide status briefings, compliance evidence, and technical documentation as assigned.

Explore Related Opportunities

Compliance Officers jobs near me in MarylandJobs near me in MarylandCompliance Officers jobs

Job Location

Linthicum Heights, Maryland, 21090, United States

Frequently asked questions about this position

Apply For This Position

Apply NowIn partnership withJazzHR