Alternate ISSO

Clearance: Secret The Alternate ISSO supports the security and compliance of government systems by implementing controls, maintaining documentation, and ensuring adherence to federal standards such as NIST 800-53 and FISMA. This role works within the Risk Management Framework (RMF) to monitor systems, assess risks, and collaborate with stakeholders to maintain a strong security posture. They play a key role in bridging technical teams and security leadership while supporting continuous monitoring and accreditation efforts. Overall, the position ensures systems operate securely and remain compliant throughout their lifecycle. Serve as Alternate ISSO (A/ISSO) for multiple systems and coordinate with BISSO Ensure compliance with security policies, standards, and FISMA requirements Manage ATO processes, POA&Ms, and continuous monitoring activities Conduct risk assessments, vulnerability management, and security audits Maintain system accreditation documentation and overall security posture Bridge communication between technical teams and system/security owners Perform web application security testing, including penetration testing and vulnerability assessments Apply knowledge of NIST 800-53, FISMA, and OWASP Top 10 vulnerabilities Utilize security tools such as Burp Suite and OWASP ZAP Hold or pursue certifications such as CEH, GWAPT, or CompTIA Security+ Position: Alternate ISSO Location: Rosslyn, VA, Clearance: Secret The Alternate ISSO supports the security and compliance of government systems by implementing controls, maintaining documentation, and ensuring adherence to federal standards such as NIST 800-53 and FISMA. This role works within the Risk Management Framework (RMF) to monitor systems, assess risks, and collaborate with stakeholders to maintain a strong security posture. They play a key role in bridging technical teams and security leadership while supporting continuous monitoring and accreditation efforts. Overall, the position ensures systems operate securely and remain compliant throughout their lifecycle. Serve as Alternate ISSO (A/ISSO) for multiple systems and coordinate with BISSO Ensure compliance with security policies, standards, and FISMA requirements Manage ATO processes, POA&Ms, and continuous monitoring activities Conduct risk assessments, vulnerability management, and security audits Maintain system accreditation documentation and overall security posture Bridge communication between technical teams and system/security owners Perform web application security testing, including penetration testing and vulnerability assessments Apply knowledge of NIST 800-53, FISMA, and OWASP Top 10 vulnerabilities Utilize security tools such as Burp Suite and OWASP ZAP Use scripting languages like Python or JavaScript for security testing and automation Hold or pursue certifications such as CEH, GWAPT, or CompTIA Security+ Who is ActioNet? ActioNet is a dynamic, award-winning SEI CMMI Level 4 and ISO 20000/ISO 27000 I Certified IT Services Firm that specializes in Enterprise Software Development involving Full Lifecycle Methodology, Project Management, Information Systems Security, Systems Integration and Training. ActioNet is committed to quality exemplified by our continual efforts to enhance how we do business. Our vision is what sets up apart, we help our customers align their IT strategies with their business goals. Why ActioNet? It is simple. We are passionate about the inspirational missions of our customers and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health and well-being of our nation. We have been awarded the Washington Post Top Places to Work for 8 years in the row. What's in It For You? As an ActioNeter, you get to be part of exceptional team and a corporate culture that nurtures mutual success for our customers, employees and our communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy and a desire to develop your skills, experience and career. Are you ready to make a difference? ActioNet is an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. #J-18808-Ljbffr