Cleared On Site Mid-Level Information Systems Security Officers (ISSO) (5358)

SMX is seeking a highly motivated Information System Security Officer (ISSO) – Mid to support a mission-critical federal program in Washington, DC. This individual will serve as a key cybersecurity resource responsible for supporting the security posture, compliance activities, and operational security requirements of enterprise information systems and applications. The selected candidate will act as a trusted advisor to System Owners (SOs), Business Process Owners, Information System Security Managers (ISSMs), and cybersecurity leadership on matters related to information system security, risk management, and regulatory compliance. This role requires experience supporting Risk Management Framework (RMF) activities, implementing security controls, monitoring system security posture, and ensuring information systems remain compliant with federal cybersecurity requirements while supporting mission objectives. This position is on site in Washington, DC and requires an active TS/SCI clearance. Essential Duties & Responsibilities:Serve as a primary cybersecurity advisor to System Owners (SOs), Business Process Owners, and ISSMs on matters related to information system securitySupport implementation, maintenance, and continuous improvement of security controls across enterprise systems and applicationsAssist with Risk Management Framework (RMF) activities including system categorization, security control implementation, assessment support, and continuous monitoringDevelop, maintain, and update security documentation including System Security Plans (SSPs), POA&Ms, security procedures, and supporting authorization artifactsMonitor system security posture and identify risks, vulnerabilities, and compliance gaps requiring remediationCoordinate with engineers, system administrators, developers, and security personnel to ensure security requirements are incorporated throughout the system lifecycleSupport Authorization to Operate (ATO) activities and ongoing authorization maintenance effortsConduct security reviews and assessments to validate implementation and effectiveness of security controlsAssist in the identification, documentation, tracking, and remediation of security findings and vulnerabilitiesReview and validate user access controls, privileged accounts, hardware inventories, software inventories, and system configurationsSupport audit activities, compliance reviews, and cybersecurity inspectionsProvide guidance regarding physical and logical protection of information system assetsDevelop reports, metrics, and recommendations related to system security posture and compliance statusRecommend improvements to security processes, procedures, and operational controlsSupport incident response, security investigations, and remediation activities as requiredRequired Skills & ExperienceActive TS/SCI clearance requiredMinimum of 5 years of professional experience supporting cybersecurity, information assurance, RMF, or information system security activitiesExperience serving as an ISSO, cybersecurity analyst, security engineer, or related security role within a federal environmentExperience supporting Risk Management Framework (RMF) activities and Authorization to Operate (ATO) processesExperience developing and maintaining SSPs, POA&Ms, security control documentation, and related authorization artifactsFamiliarity with NIST 800-53, NIST 800-37, FISMA, and federal cybersecurity requirementsExperience implementing and assessing security controls within enterprise information systemsExperience supporting vulnerability management, remediation tracking, and continuous monitoring activitiesKnowledge of access control management, security documentation, and compliance reportingStrong analytical, troubleshooting, and problem-solving skillsAbility to assess risks and recommend practical security solutionsStrong written and verbal communication skillsAbility to work independently while managing multiple priorities in a fast-paced environmentDesired Skills & Experience Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related fieldExperience supporting federal government, law enforcement, intelligence community, or national security programsExperience supporting cloud-based systems and cloud security compliance activitiesExperience supporting Governance, Risk, and Compliance (GRC) platformsFamiliarity with enterprise security tools including vulnerability scanners, SIEM platforms, and compliance monitoring toolsExperience supporting security audits, inspections, and assessment activitiesFamiliarity with Agile development methodologies and DevSecOps practicesOne or more of the following certifications preferred:Security+CAP (Certified Authorization Professional)SSCPGSECCISSP AssociateCASP+Other relevant cybersecurity certificationsApplication Deadline: 9-4-2026# LI-SA1The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.The proposed salary for this position is:$105,200—$176,900 USDAt SMX, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.SMX is an Equal Opportunity employer including disabilities and veterans.Selected applicant may be subject to a background investigation and/or education verification.SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).