Senior Cyber Specialist - ISSO

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary
JCS Solutions is seeking a Senior Cyber Specialist serving as an Information System Security Officer (ISSO) to support the cybersecurity posture, authorization, continuous monitoring, and compliance of enterprise information systems in a Department of Defense environment. This position serves as the primary cybersecurity point of contact for assigned systems and is responsible for maintaining authorization packages, assessing risk, overseeing vulnerability remediation, and ensuring compliance with applicable federal and DoD cybersecurity requirements.
The successful candidate will work closely with engineering, operations, cybersecurity, and government stakeholders to ensure systems are designed, implemented, documented, and operated in accordance with Risk Management Framework (RMF) requirements. This role requires the ability to bridge the gap between technical implementation and cybersecurity compliance by translating technical solutions into defensible authorization artifacts and translating compliance requirements into actionable engineering guidance.

Location: Ft. Meade, MD
Clearance: Secret
Salary: $100,000.00 - $144,000.00
Certification: Active DoD 8140/8570 IAT Level II certification

What's in it for you:

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do:
Authorization and Risk Management Framework

• Serve as the Information System Security Officer (ISSO) for assigned systems.
• Execute RMF activities across categorization, control selection, implementation, assessment, authorization, and continuous monitoring phases.
• Develop, maintain, and defend authorization packages.
• Maintain System Security Plans (SSPs), security control implementation statements, risk assessment reports, and supporting artifacts.
• Maintain system records and documentation within eMASS or other approved authorization repositories.
• Develop and manage Plans of Action and Milestones (POA&Ms).
• Support security assessments, audits, inspections, and cybersecurity readiness activities.
• Evaluate system and architecture changes for security impacts and provide recommendations regarding acceptance, mitigation, or denial.
• Support Authorization to Operate (ATO) activities and sustainment efforts.
• Vulnerability Management, Compliance, and Continuous Monitoring
• Oversee vulnerability management activities, including scan reviews, validation, prioritization, remediation tracking, and reporting.
• Ensure compliance with DISA STIGs and approved security baselines.
• Review cybersecurity directives, bulletins, advisories, and tasking orders applicable to assigned systems.
• Perform continuous monitoring activities and security posture assessments.
• Conduct control reviews, audit reviews, account reviews, and privilege assessments.
• Develop security posture reporting and remediation recommendations.
• Support cybersecurity incident response, reporting, documentation, and corrective actions.
• Engineering Partnership and Cybersecurity Advisory
• Collaborate with network, systems, cloud, application, and operations teams to ensure cybersecurity requirements are integrated into system designs.
• Provide guidance on access control, auditing, encryption, least privilege, and system boundary definitions.
• Advise government stakeholders and program leadership regarding cybersecurity risks and remediation options.
• Mentor junior cybersecurity personnel.
• Improve security documentation, reporting processes, templates, and authorization workflows.

Documentation

• Develop and maintain System Security Plans (SSPs).
• Create security control implementation statements.
• Maintain system boundary documentation, hardware inventories, software inventories, and data flow diagrams.
• Develop risk assessments and security impact analyses.
• Create and maintain POA&Ms and supporting documentation.
• Develop contingency plans, continuity plans, and incident response plans.
• Maintain configuration baseline documentation and deviation justifications.
• Produce continuous monitoring reports, security posture reports, and standard operating procedures.

What you will bring:

• Bachelor's degree or equivalent experience with 12+ years of relevant experience, or Master's degree with 10+ years of experience.
• Specific experience, education, and training may be considered in lieu of a degree.
• Active DoD Secret security clearance.
• Current DoD 8140/8570 IAT Level II certification or higher, such as Security+ CE or CISSP.
• Experience serving as an ISSO or performing equivalent cybersecurity compliance responsibilities.
• Experience supporting Risk Management Framework (RMF) activities.
• Experience developing and maintaining authorization packages and Authorization to Operate (ATO) documentation.
• Experience utilizing eMASS or comparable authorization management systems.
• Experience developing and managing System Security Plans (SSPs), POA&Ms, risk assessments, and security documentation.
• Experience supporting vulnerability management, remediation tracking, and compliance efforts.
• Experience applying DISA STIGs and cybersecurity compliance requirements.
• Experience supporting continuous monitoring programs.
• Experience participating in security assessments, audits, inspections, and cybersecurity reviews.
• Experience supporting incident response activities and corrective action tracking.
• Experience collaborating with engineering teams to implement cybersecurity requirements.
• Strong written and verbal communication skills.
• Experience developing technical cybersecurity documentation and executive-level reporting.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers' mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $100,000.00 - $144,000.00

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team willonlycome from @JCSSolutions.com. We want to emphasize thatwe do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.