Information System Security Officer (ISSO)

Information System Security Officer (ISSO) – Ft. Meade, MD Everforth ECS is seeking an experienced ISSO to support robust Impact Level (IL) 5 and IL6 programs in a DoD environment that houses multiple U.S. Coalition Mission Partner Environments (MPE). The role requires strong cybersecurity judgment, attention to detail, and the ability to support authorization, compliance, and continuous monitoring activities across multiple enclaves in a dynamic Azure DoD environment. The ISSO reports to the Senior Technical Program Manager. Responsibilities Support ISSO activities in a DoD Azure environment, including RMF, ATO maintenance, continuous monitoring, and compliance documentation. Develop and maintain ATO artifacts such as security plans, control evidence, vulnerability reports, diagrams, inventories, and risk documentation. Conduct security control assessments, audit readiness, continuous monitoring reviews, and authorization package updates for classified systems. Develop, update, and track POA&Ms for vulnerabilities, STIG findings, control gaps, audit findings, and other security risks. Maintain eMASS records—control implementation details, artifacts, POA&Ms, assessment results, risk documentation, continuous monitoring evidence. Review and validate STIG artifacts submitted by engineers, including checklists, scan results, remediation evidence, mitigations, and closure documentation. Collaborate with engineers, system administrators, cloud teams, and government stakeholders to validate findings, track remediation, and keep security documentation current. Administer and maintain ACAS (Nessus scanners), including plugin updates, credentialed scan issue troubleshooting, schedule scans, and vulnerability reporting. Review ACAS scan results and prepare vulnerability reports, metrics, POA&M updates, and remediation tracking artifacts. Administer and support Trellix/ESS (ePO policies, endpoint protection settings, agent health, alert monitoring, reporting). Investigate Trellix endpoint alerts, suspicious activity, malware events, and agent issues; assist with tuning policies, exclusions, and alerting logic. Assist with monitoring, configuring, and documenting alerts, incidents, dashboards, and security events in Microsoft Sentinel. Participate in cybersecurity status meetings, vulnerability reviews, POA&M reviews, and ATO-related coordination with government and contractor teams. Perform other duties as assigned. Qualifications & Required Skills U.S. Citizen. Active Secret clearance – TS/SCI preferred (or ability to obtain). Active DoD 8140 IAT Level II Security+, or higher. Must work five days a week onsite at Fort Meade, MD. Experience supporting DoD RMF, ATO maintenance, continuous monitoring, and security authorization documentation. Experience with vulnerability management using ACAS/Nessus. Hands‑on experience with eMASS or similar RMF/GRC software for control documentation, artifact management, POA&M tracking, and authorization package maintenance. Experience creating, updating, and managing POA&Ms for vulnerabilities, STIG findings, audit findings, and NIST 800‑53 controls. Experience reviewing and validating DISA STIG artifacts and coordinating remediation with technical teams. Experience with Trellix endpoint/security tools. Familiarity with NIST SP 800‑53 controls, DoD RMF processes, and cyber security assessment documentation. Practical understanding of secured IT infrastructure, especially Windows, RHEL, and Azure environments, evaluating network, identity, server, endpoint, authentication, logging, and core service components for security, compliance, and authorization posture. Strong problem‑solving and decision‑making capabilities. Proven ability to weigh costs and benefits of potential actions and identify the most appropriate solution. Excellent interpersonal and oral/written communication skills, with the ability to interact professionally with a diverse set of stakeholders. Desired Skills & Benefits Experience supporting Microsoft Azure or other cloud environments in a DoD or federal setting. Experience with Security Control Assessments. Experience with Microsoft Sentinel, Microsoft Defender for Cloud, Azure Policy, or other security monitoring/compliance tools. Strong technical writing skills with ability to develop control implementation statements, risk mitigation narratives, POA&M closure justifications, and ATO documentation. Salary Range: $150,000–170,000 per annum. Equal Employment Opportunity ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, or local jurisdiction law. #J-18808-Ljbffr