We need someone capable of translating dense DoD policy and RMF guidance into actionable technical direction for engineers; bridging compliance requirements with cloud-native architecture patterns (AWS, Kubernetes, CI/CD); and authoring assessor-ready RMF artifacts and control narratives that survive scrutiny from ISSMs and Authorizing Officials.

As a key partner to ISSMs, assessors, Authorizing Officials, and Product and Engineering teams, you will maintain authorization packages, manage continuous monitoring workflows, and ensure defensible evidence collection across accredited systems, serving as the technical authority on DoD RMF execution and compliance posture for our platform.

Note: Candidates must reside in one of our approved hiring hubs:

DC/Maryland/Virginia

Denver/Colorado Springs, CO

This is a full-time position.

Execute all phases of NIST SP 800-37 DoD RMF lifecycle—categorization, control selection, implementation, assessment, authorization, and continuous monitoring—for systems in DoD IL4/IL5 environments.

Own eMASS authorization packages end-to-end, populating control implementation details, test results, artifacts, and continuous monitoring status to keep packages assessor-ready.

Manage DISA PPSM registrations, reconciling ports, protocols, and services data flows to align with CAL and boundary architecture.

Author System Security Plans, control implementation narratives, Plans of Action & Milestones, and supporting RMF artifacts that reflect cloud architecture and operating reality.

Drive continuous monitoring operations—monthly POA&M updates, vulnerability and patch reporting, IAVM compliance, significant change reviews, periodic assessments—and push findings to closure with engineering.

Validate STIG compliance and analyze vulnerability scan results from ACAS/Tenable Nessus, tracking remediation against NIST 800-53 and DoD requirements.

Information Systems Security Officer (ISSO)

Responsibilities

Qualification

Preferred

Benefits

Company

Second-Front-Systems

More roles at Second-Front-Systems