Information System Security Officer (ISSO) (Cybersecurity)

Location: Remote within the United States; candidates must reside in AL, AZ, DC, FL, GA, ID, MD, MS, NJ, NC, OK, OH, PA, SC, TN, TX, UT, VA, or WV. Must be available during Eastern Time business hours. Occasional travel to FAA facilities and other CONUS locations may be required.

Salary: $95,000–$105,000 per year

Company

hirify.global, Inc. is a federal contractor delivering information technology and network solutions for government customers.

What you will do

• Support systems throughout the NIST RMF and ATO lifecycle, including ongoing authorization and continuous monitoring.
• Implement, assess, and document NIST SP 800-53 security controls and authorization evidence.
• Develop and maintain SSPs, risk assessments, POA&Ms, control documentation, and assessment evidence.
• Review vulnerability scans and security findings, assess risk, and coordinate corrective actions through validated closure.
• Evaluate system and configuration changes for security, control, and authorization impacts across AWS/cloud, application, infrastructure, and data environments.
• Communicate risks, remediation status, and security recommendations to system owners, engineers, architects, and cybersecurity stakeholders.

Requirements

• U.S. citizenship is required.
• Must be able to obtain and maintain a Public Trust clearance and required federal suitability.
• Must reside in one of the specified U.S. states and be available during Eastern Time business hours.
• At least 4 years of experience in cybersecurity, information assurance, RMF, system authorization, vulnerability management, or related federal security work.
• Experience supporting RMF and ATO/A&A activities and working knowledge of NIST SP 800-53 and federal cybersecurity requirements.
• Hands-on experience managing POA&Ms, analyzing vulnerability or security findings, and coordinating remediation.
• Experience developing and maintaining security authorization documentation and evidence.
• Understanding of continuous monitoring, risk management, cloud security, and security control assessment.
• Strong technical writing, communication, and organizational skills.
• A bachelor's degree in cybersecurity, information systems, computer science, information technology, or a related field is preferred; equivalent relevant education or training may apply.

Nice to have

• Experience supporting FAA, DOT, or another federal civilian agency.
• Experience with FISMA High or other high-impact systems.
• Experience with AWS, AWS GovCloud, or hybrid cloud environments.
• Experience with Tenable/Nessus, Qualys, CSAM, Xacta, Archer, or similar security/GRC platforms.
• Familiarity with Okta, CyberArk, FedRAMP, DevSecOps, or continuous ATO (cATO).
• Security+, CGRC, CISSP, CISM, CCSP, or another relevant certification.

Culture & Benefits

• Full-time employment with comprehensive health, dental, vision, pet, and legal insurance.
• 401(k) matching, paid leave, paid holidays, and wellness programs.
• Employer-paid life and disability insurance.
• Professional development and education benefits.
• Supportive environment with an emphasis on collaboration, career growth, and veterans-first hiring.