Information System Security Officer (ISSO) (Cybersecurity)

Location: Hybrid in Fairfax, Virginia, United States, with up to 3 days per week onsite; additional onsite support may be required.

Salary: $140,000–$160,000 per year

Company

hirify.global is the federal segment of Everforth, delivering technology solutions in data and AI, cybersecurity, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

• Support RMF activities for a DISA IL5 AWS environment through development, IATT, ATO, and continuous monitoring.
• Develop and maintain security plans, control implementation evidence, vulnerability documentation, diagrams, inventories, risk documentation, policies, procedures, and SOPs.
• Maintain eMASS records, assessment results, POA&Ms, risk documentation, and continuous monitoring evidence.
• Review DISA STIG artifacts, scan results, remediation evidence, mitigations, and vulnerability closure documentation.
• Perform ACAS/Nessus vulnerability analysis and investigate DTOs, CVEs, cybersecurity directives, and vulnerability notifications.
• Coordinate with cloud, systems, network, application, government, and cybersecurity stakeholders to validate controls and remediate findings.

Requirements

• U.S. citizenship is required.
• Ability to obtain a Secret clearance; active clearance is preferred.
• Active DoD 8140 IAT Level II Security+ certification or higher.
• At least 5 years of relevant cybersecurity experience, including DoD information systems, RMF, security authorization, or continuous monitoring.
• Hands-on experience with DoD RMF, NIST SP 800-53, eMASS, authorization packages, POA&Ms, ACAS/Nessus, DISA STIGs, and security control documentation.
• Working knowledge of AWS security and compliance, Kubernetes, Linux, Windows, Entra ID/Active Directory, networking, authentication, endpoint security, logging, and monitoring.

Nice to have

• Active Secret clearance.
• Experience supporting an initial IATT or ATO and developing authorization artifacts from the ground up.
• Kubernetes security and compliance experience.
• Experience with Trellix, Elastic, Grafana, Loki, AWS-native security services, or similar technologies.
• Experience supporting DISA programs and working with government cybersecurity stakeholders, assessors, or Authorizing Officials.

Culture & Benefits

• Mission-driven work supporting defense, intelligence, and federal civilian agencies.
• Environment focused on delivery excellence, innovation, accountability, and professional growth.
• Collaboration with engineering teams, government cybersecurity stakeholders, and program leadership.