(781) Cybersecurity Technical Specialist Level III / ISSO

Description

The company is an IT consulting firm that delivers technology solutions to government and commercial customers, with consultants working alongside the customer.

The team supports U.S. Army ATEC cybersecurity operations at Aberdeen Proving Ground, Maryland, and the role covers DoD Risk Management Framework work, security-control analysis, vulnerability management, eMASS, POA&M management and Continuous Monitoring.

Candidates must live within commuting distance of Aberdeen Proving Ground or be willing to relocate on their own before starting.

Active Secret clearance is required.

Responsibilities

• Carry out assigned RMF tasks under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253 and applicable Army cybersecurity rules.
• Help with system categorization, control implementation, assessment, authorization and Continuous Monitoring.
• Examine technical settings, control implementations, compliance evidence and documentation to find deficiencies, unsupported claims and inconsistencies, then recommend fixes.
• Support ATO, IATT, reauthorization and ongoing authorization work.
• Build, review, maintain and validate eMASS packages, controls, implementation statements, assessment evidence and findings.
• Make sure documents match actual system configurations, security posture and compliance status.
• Keep clear links between controls, evidence, assessment findings and POA&Ms.
• Coordinate package updates, quality reviews and submissions through the RMF leadership chain.
• Check NIST SP 800-53 controls against documented implementations and technical evidence.
• Validate findings, spot compliance gaps, separate false positives and assess inherited controls.
• Write defensible recommendations covering remediation, mitigation, further assessment or risk acceptance.
• Work with authorized System Administrators and cybersecurity stakeholders on technical validation.
• Review ACAS, SCAP, DISA STIG and other approved vulnerability results.
• Identify vulnerabilities, configuration weaknesses, affected assets and compliance gaps.
• Run recurring vulnerability reviews and keep Government-approved tracking records current.
• Build and upkeep POA&Ms covering findings, risks, milestones and supporting evidence.
• Confirm remediation before recommending closure, and escalate significant unresolved risks.
• Carry out recurring control reviews, vulnerability assessments, compliance checks and cybersecurity reports.
• Watch for system changes, emerging threats and conditions that affect authorization or security posture.
• Support Continuous Monitoring documentation, corrective actions and risk tracking.
• Report suspected incidents, significant vulnerabilities and control failures quickly through authorized channels.
• Assist incident response without accepting risk or approving exceptions on your own.
• Produce accurate, complete, traceable and defensible cybersecurity deliverables.
• Check findings, asset identifiers, control mappings, vulnerability references and evidence before submission.
• Fix errors, unsupported claims and inconsistencies promptly.
• Keep version control and documentation integrity to established quality standards.
• Work with Team Leads, ISSMs, System Administrators, assessors and Government stakeholders to gather evidence, investigate issues and complete RMF work.
• Brief technical audiences on vulnerabilities, controls, POA&Ms, risks and authorization status.
• Report progress, blockers, open findings and corrective recommendations clearly.
• Keep leadership informed and do not make unauthorized commitments.
• Required: a bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Engineering or a related field, where equivalent experience may qualify if the contract allows it.
• Required: demonstrated experience supporting DoD, U.S. Army or federal cybersecurity programs.
• Required: hands-on ISSO, RMF, information assurance or equivalent cybersecurity work.
• Required: solid understanding of NIST SP 800-53 controls, RMF processes, compliance and authorization requirements.
• Required: experience reviewing control implementations, technical evidence, vulnerability findings and cybersecurity documentation.
• Required: experience with authorization packages, POA&Ms and Continuous Monitoring.
• Required: ability to analyze technical cybersecurity issues on your own and produce accurate, defensible work.
• Required: strong analytical, organizational, documentation, communication and problem-solving skills.
• Required practical knowledge of DoD RMF, including DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253 and DoD/Army rules.
• Required practical knowledge of eMASS package maintenance, control documentation, implementation statements, evidence, findings and workflow support.
• Required practical knowledge of ACAS, DISA STIG compliance, SCAP scanning, findings analysis and remediation validation.
• Required practical knowledge of POA&M documentation, remediation tracking, milestones, risk acceptance support and evidence validation.
• Required practical knowledge of recurring security reviews, vulnerability tracking, posture assessment and compliance reporting.
• Required practical knowledge of control validation, technical risk assessment, compliance evaluation and corrective-action recommendations.
• Required knowledge of Windows, Linux, networking, system configuration and enterprise security concepts.
• Required knowledge of accurate cybersecurity reporting, RMF artifacts, quality assurance and technical briefings.
• Must meet DoD 8140 cybersecurity workforce requirements for the assigned work role, proficiency level and contract.
• Relevant certifications may include CompTIA Security+, CySA+, CASP+/SecurityX, CISSP or other recognized qualifications; additional OS, networking, vendor-specific and cybersecurity certifications are preferred.
• Mandatory certifications, education and experience depend on the contract, labor category and designated DoD 8140 work role.
• Must meet applicable U.S. citizenship requirements set by the contract.
• Must hold or qualify for the required Government security clearance and keep eligibility throughout employment.
• Must pass Aberdeen Proving Ground installation access, identity verification and credentialing.
• Must complete required Government cybersecurity awareness, acceptable-use and security training.
• Must follow DoD, Army, ATEC and installation security policies, and keep access eligibility for assigned facilities, networks and systems.
• Preferred: experience supporting U.S. Army, ATEC, NETCOM or other DoD cybersecurity programs.
• Preferred: experience with enterprise information systems, network infrastructure or mission-critical Government environments.
• Preferred: ability to interpret and apply DISA STIG requirements and vulnerability assessment results.
• Preferred: experience with cybersecurity authorization or reauthorization efforts.
• Preferred: experience coordinating remediation with System Administrators and system engineering teams.
• Preferred: experience supporting Government inspections, cybersecurity assessments or technical compliance reviews.
• Preferred: familiarity with enterprise vulnerability tracking, reporting dashboards, Microsoft Excel, Microsoft Lists and other approved cybersecurity tools.
• Preferred: experience writing defensible risk acceptance recommendations and supporting documents.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Assurance, Engineering or a related field; equivalent experience may qualify if the contract permits.
• Demonstrated experience supporting DoD, U.S. Army or federal cybersecurity programs.
• Hands-on ISSO, RMF, information assurance or equivalent cybersecurity work.
• Solid grasp of NIST SP 800-53 controls, RMF processes, compliance and authorization requirements.
• Experience reviewing control implementations, technical evidence, vulnerability findings and cybersecurity documents.
• Experience with authorization packages, POA&Ms and Continuous Monitoring.
• Ability to analyze technical cybersecurity issues independently and produce accurate, defensible work.
• Strong analytical, organizational, documentation, communication and problem-solving skills.
• Practical knowledge of DoD RMF, eMASS, ACAS, DISA STIG, SCAP, POA&M management and Continuous Monitoring.
• Knowledge of Windows, Linux, networking, system configuration and enterprise security concepts.
• Must meet DoD 8140 workforce requirements for the assigned work role, proficiency level and contract.
• Relevant certifications may include CompTIA Security+, CySA+, CASP+/SecurityX, CISSP or other recognized qualifications; OS, networking, vendor and cybersecurity certifications are preferred.
• Must meet U.S. citizenship requirements set by the contract and hold or qualify for the required Government security clearance.
• Must pass Aberdeen Proving Ground installation access, identity verification and credentialing, and complete required Government cybersecurity training.

Conditions

Full-time, on-site work at the assigned Government installation at Aberdeen Proving Ground, Maryland.

Live within commuting distance of Aberdeen Proving Ground or be willing to relocate on your own before employment.

Wear professional business attire required by APG and ATEC during on-site duty hours, subject to approved exceptions.

Active Secret clearance required.

Follow reasonable, authorized direction from designated leadership, meet deadlines and raise conflicting instructions or delays promptly.

The Team Lead/O-ISSM is the main operational tasking lead, under the Project Lead, Program Manager and authorized Government TPOC.

System assignments do not give exclusive ownership or ISSM, SCA or Authorizing Official authority.

Follow the company employee handbook, Government workplace policies and security procedures.

Equal-opportunity statement: the company is an equal opportunity employer.