Senior Cyber Specialist – ISSO

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Senior Cyber Specialist serving as an Information System Security Officer (ISSO) to support the cybersecurity posture, authorization, continuous monitoring, and compliance of enterprise information systems in a Department of Defense environment. This position serves as the primary cybersecurity point of contact for assigned systems and is responsible for maintaining authorization packages, assessing risk, overseeing vulnerability remediation, and ensuring compliance with applicable federal and DoD cybersecurity requirements. The successful candidate will work closely with engineering, operations, cybersecurity, and government stakeholders to ensure systems are designed, implemented, documented, and operated in accordance with Risk Management Framework (RMF) requirements. This role requires the ability to bridge the gap between technical implementation and cybersecurity compliance by translating technical solutions into defensible authorization artifacts and translating compliance requirements into actionable engineering guidance. Location: Ft. Meade, MD Clearance: Secret Salary: $100,000.00 - $144,000.00 Certification: Active DoD 8140/8570 IAT Level II certification What’s in it for you: Join a premier technology firm specializing in innovative solutions. Be part of a collaborative, inclusive, and innovative work culture. Enjoy tremendous growth potential in a high-performing team environment. A robust benefits package:Health, dental, and vision insurance Life insurance Short-and-long term disability Paid time off (PTO) 401k retirement plan with employer match Annual Professional Development Reimbursement Program And more! What you will do: Authorization and Risk Management Framework Serve as the Information System Security Officer (ISSO) for assigned systemsExecute RMF activities across categorization, control selection, implementation, assessment, authorization, and continuous monitoring phasesDevelop, maintain, and defend authorization packagesMaintain System Security Plans (SSPs), security control implementation statements, risk assessment reports, and supporting artifactsMaintain system records and documentation within eMASS or other approved authorization repositoriesDevelop and manage Plans of Action and Milestones (POA&Ms)Support security assessments, audits, inspections, and cybersecurity readiness activitiesEvaluate system and architecture changes for security impacts and provide recommendations regarding acceptance, mitigation, or denialSupport Authorization to Operate (ATO) activities and sustainment effortsVulnerability Management, Compliance, and Continuous MonitoringOversee vulnerability management activities, including scan reviews, validation, prioritization, remediation tracking, and reportingEnsure compliance with DISA STIGs and approved security baselinesReview cybersecurity directives, bulletins, advisories, and tasking orders applicable to assigned systemsPerform continuous monitoring activities and security posture assessmentsConduct control reviews, audit reviews, account reviews, and privilege assessmentsDevelop security posture reporting and remediation recommendationsSupport cybersecurity incident response, reporting, documentation, and corrective actionsEngineering Partnership and Cybersecurity AdvisoryCollaborate with network, systems, cloud, application, and operations teams to ensure cybersecurity requirements are integrated into system designsProvide guidance on access control, auditing, encryption, least privilege, and system boundary definitionsAdvise government stakeholders and program leadership regarding cybersecurity risks and remediation optionsMentor junior cybersecurity personnelImprove security documentation, reporting processes, templates, and authorization workflows Documentation Develop and maintain System Security Plans (SSPs)Create security control implementation statementsMaintain system boundary documentation, hardware inventories, software inventories, and data flow diagramsDevelop risk assessments and security impact analysesCreate and maintain POA&Ms and supporting documentationDevelop contingency plans, continuity plans, and incident response plansMaintain configuration baseline documentation and deviation justificationsProduce continuous monitoring reports, security posture reports, and standard operating procedures. What you will bring: Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experienceSpecific experience, education, and training may be considered in lieu of a degreeActive DoD Secret security clearanceCurrent DoD 8140/8570 IAT Level II certification or higher, such as Security+ CE or CISSPExperience serving as an ISSO or performing equivalent cybersecurity compliance responsibilitiesExperience supporting Risk Management Framework (RMF) activitiesExperience developing and maintaining authorization packages and Authorization to Operate (ATO) documentationExperience utilizing eMASS or comparable authorization management systemsExperience developing and managing System Security Plans (SSPs), POA&Ms, risk assessments, and security documentationExperience supporting vulnerability management, remediation tracking, and compliance effortsExperience applying DISA STIGs and cybersecurity compliance requirementsExperience supporting continuous monitoring programsExperience participating in security assessments, audits, inspections, and cybersecurity reviewsExperience supporting incident response activities and corrective action trackingExperience collaborating with engineering teams to implement cybersecurity requirementsStrong written and verbal communication skillsExperience developing technical cybersecurity documentation and executive-level reporting JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities. JCS is both a Great Place to Work and a Top Places to Work certified company. Our employees embody our core values, and we are looking for others who do too! Customer Experience: Strive for excellence and delight our clients Innovation: Embrace creative thinking to enable continual growth and powerful solutions Accountability: Take ownership of and pride in our actions and service delivery Inspire: Be inspired to be your best self and have fun in the process Integrity: Do the right thing, the right way, every time! Stewardship: The careful and responsible management of something entrusted to our care. At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $100,000.00 - $144,000.00 Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws. NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app. Powered by JazzHR 9t9h6pZGaT