Information Systems Security Officer (ISSO) (DoD RMF/Cybersecurity)

Location: Remote; candidates must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, CO. U.S. citizenship and an active U.S. Secret security clearance are required.

Salary: $150,000–$170,000 per year, plus potential equity awards and discretionary bonuses.

Company

hirify.global Systems is a public-benefit software company developing secure software deployment capabilities for government and regulated networks, with a focus on U.S. national security.

What you will do

• Execute the NIST SP 800-37 DoD RMF lifecycle for systems operating in DoD IL4/IL5 environments.
• Own eMASS authorization packages and maintain control implementations, test results, artifacts, and continuous monitoring status.
• Manage DISA PPSM registrations, ports, protocols, services, CAL alignment, and boundary/data-flow documentation.
• Author System Security Plans, control narratives, POA&Ms, and other assessor-ready RMF artifacts.
• Run continuous monitoring, vulnerability and patch reporting, IAVM compliance, significant change reviews, and periodic assessments; drive findings to closure with engineering.
• Partner with Product and Engineering to map AWS, containers, Kubernetes, and CI/CD controls to DoD RMF and NIST 800-53 requirements, while serving as a technical contact for ISSMs, assessors, and Authorizing Officials.

Requirements

• 3–5 years of hands-on DoD cybersecurity, RMF authorization, or information assurance experience, including direct ISSO or equivalent compliance support for DoD ATO packages.
• Demonstrated proficiency building and maintaining eMASS authorization packages.
• Working knowledge of DISA PPSM registration, ports, protocols, services, CAL, and boundary/data-flow documentation.
• Practical knowledge of NIST 800-53 Rev. 4/5, NIST 800-37 RMF, and DoD implementation guidance.
• Familiarity with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, DISA Cloud Computing SRG, and continuous monitoring standards.
• Understanding of AWS, containers, Kubernetes, CI/CD, and cloud-native security control implementation.
• Strong written communication skills for assessor-ready documentation and control narratives.
• Active U.S. Secret security clearance required.
• DoD 8570/8140 IAM Level I or IAT Level II baseline certification, including Security+, CISSP, or equivalent, required or obtainable within 90 days.
• U.S. citizenship required.

Culture & Benefits

• Full-time remote work within the approved U.S. hiring hubs.
• Employer-paid medical, dental, and vision coverage for employees and dependents.
• 401(k) with a 3% company contribution, equity incentive plan, and referral bonus program.
• Flexible paid time off, federal holidays, generous parental leave, wellness benefits, and mental health resources.
• Home office technology stipend and annual professional development stipend.
• Purpose-driven, team-oriented environment emphasizing ownership, autonomy, action, and measurable results.

Hiring process

• Apply through the job page application form; applications are reviewed on a rolling basis until the position is filled.