Information Systems Security Officer (ISSO) (Cybersecurity)

TL;DR

Information Systems Security Officer (ISSO) (Cybersecurity): Implementing RMF, continuous monitoring, and cybersecurity controls for Department of Defense software factories and classified cloud environments with an accent on cATO, vulnerability management, and DevSecOps security. Focus on maintaining authorization artifacts, hardening Kubernetes and container environments, validating compliance with STIGs, and coordinating remediation across mission teams.

Location: Full-time on-site in San Antonio, Texas, United States. Support is provided across unclassified, Secret, and SCI environments.

Company

hirify.global delivers intelligence, military, cybersecurity, and software solutions for government and defense missions.

What you will do

• Execute RMF activities for system authorization, continuous monitoring, and Continuous Authority to Operate.
• Maintain SSPs, POA&Ms, SARs, inventories, audit evidence, and other cybersecurity artifacts.
• Monitor cybersecurity posture, manage vulnerabilities, implement STIGs, and coordinate remediation.
• Support security assessments, penetration testing, inspections, audits, and operational readiness activities.
• Apply Zero Trust, cloud security, Kubernetes/OpenShift security, container hardening, and DevSecOps practices.
• Collaborate with Government leadership, ISSMs, ISSEs, developers, cloud engineers, and cyber operations teams.

Requirements

• U.S. citizenship and an active TS/SCI clearance obtained within the last two years are required.
• A CI Polygraph completed within the last five years is required.
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field.
• Security+, CySA+, CASP+, or an equivalent DoD 8140 certification.
• At least nine years of experience supporting Department of Defense cybersecurity missions and RMF compliance activities.
• Experience with SSPs, POA&Ms, SARs, vulnerability management, STIGs, continuous monitoring, Agile or SAFe, DevSecOps, and enterprise cloud environments.

Nice to have

• Advanced degree or CISSP, CAP, or CCSP certification.
• Experience with software factories, Kubernetes, OpenShift, Iron Bank, hardened containers, cATO, and Zero Trust.
• Experience with IL4/IL5/IL6 cloud environments, enterprise DevSecOps pipelines, Cyber Operations Teams, and Cyber Penetration Teams.
• Experience supporting multiple military services and Combatant Commands.

Culture & Benefits

• Medical insurance cost sharing for employees and dependents.
• Company-paid dental, vision, short-term disability, and long-term disability insurance.
• 401(k) plan with company match and immediate vesting.
• Paid leave, holidays, life insurance, and AD&D coverage.
• Tuition and training reimbursement.