Search Remote Jobs

Information Systems Security Officer – ISSO

Job not on LinkedIn

🔥 6 hours ago

⛰️ Colorado, Maryland, +1 more states – Remote

infoinfo

💵 $150k - $170k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Second Front Systems's careers page, not through a job board

First seen by Remote Rocketship 6 hours ago

Still open on Second Front Systems's site. Checked 52 minutes ago.

Logo of Second Front Systems

Second Front Systems

51 - 200 employees

☁️ SaaS

🎖️ Defense

🏛️ Government

SaaS • Defense • Government

Second Front Systems is a public-benefit, venture-backed company that provides mission-critical software solutions primarily to democracies around the world. Their product suite, which includes the 2F Suite, 2F Workshop, 2F Game Warden, and 2F Frontier, simplifies and accelerates the software development and delivery process. The company is trusted by leading software providers and government agencies for its secure DevSecOps solutions, enabling secure software deployment on classified and unclassified networks. Their offerings include tools for secure development, software accreditation, government cloud hosting, and edge deployment, particularly focused on supporting government and defense sectors. Second Front Systems collaborates with partners to make emerging technologies more accessible, accelerating the accreditation and compliance processes and offering solutions that can operate in remote or disconnected environments, such as drones and vehicles.

📋 Description

• Execute all phases of the NIST SP 800-37 DoD RMF lifecycle for systems in DoD IL4/IL5 environments • Own eMASS authorization packages end-to-end, including control implementation details, test results, artifacts, and continuous monitoring status • Manage DISA PPSM registrations and reconcile ports, protocols, services, data flows, CAL, and boundary architecture • Author System Security Plans, control implementation narratives, Plans of Action & Milestones, and supporting RMF artifacts • Drive continuous monitoring operations, including monthly POA&M updates, vulnerability and patch reporting, IAVM compliance, significant change reviews, and periodic assessments • Validate STIG compliance and analyze ACAS/Tenable Nessus vulnerability scan results, tracking remediation against NIST 800-53 and DoD requirements • Serve as technical point of contact for ISSMs, assessors, and Authorizing Officials during assessments, readiness reviews, and audits • Partner with Product and Engineering to map AWS, containers, Kubernetes, and CI/CD controls to DoD RMF and NIST 800-53 requirements • Maintain authorization packages and defensible evidence collection across accredited systems

🎯 Requirements

• 3–5 years hands-on DoD cybersecurity, RMF authorization, or information assurance experience, with direct ISSO or equivalent compliance role supporting DoD ATO packages • Demonstrated proficiency building and maintaining authorization packages in eMASS • Working knowledge of DISA PPSM registration, ports, protocols, services process, CAL, and boundary/data-flow documentation • Strong practical knowledge of NIST 800-53 (Rev 4/5), NIST 800-37 RMF, and DoD-specific implementation guidance • Familiarity with DISA STIGs, STIG Viewer/SCC, ACAS, IAVM, DISA Cloud Computing SRG, and continuous monitoring standards • Solid understanding of AWS, containers, Kubernetes, and CI/CD, and how cloud-native patterns map to technical security controls • Strong written communication skills to produce assessor-ready documentation and clear control narratives • Active U.S. Secret security clearance required • DoD 8570/8140 IAM Level I or IAT Level II baseline certification (Security+, CISSP, or equivalent) required or obtainable within 90 days • U.S. citizenship required • Must reside in an approved hiring hub: DC/Maryland/Virginia or Denver/Colorado Springs, CO

🏖️ Benefits

• Potential eligibility for equity awards • Discretionary bonuses • 100% employer-paid medical, dental, and vision coverage for you and your dependents • 401(k) with a 3% company contribution • Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more • Equity incentive plan • New hire technology and home office stipend • Annual professional development stipend • Flexible paid time off, plus all federal holidays • Generous parental leave • Flexible remote work opportunities • Employee referral bonus program

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🔥 7 hours ago

Angi

1001 - 5000

🏪 Marketplace

Senior Security Engineer building cloud, application, and AI security detection for Angi’s home-services marketplace. Automating triage and leading incident response across distributed infrastructure.

🔥 7 hours ago

VSP Vision Care

1001 - 5000

🏥 Healthcare

📣 Marketing

🍽️ Food & Beverage

Information Security Engineer designing security architecture and controls for VSP Vision’s healthcare and vision-services technology. Managing vulnerabilities, compliance, incidents, and infrastructure protection remotely across the US.

🔥 20 hours ago

Locked Core Tech, LLC

51 - 200

🏥 Healthcare

🔒 Cybersecurity

🏛️ Government

Cybersecurity Specialist securing Naval Medical Center San Diego’s enterprise systems for a federal IT and healthcare services provider. Managing vulnerability remediation, RMF, compliance, and authorization activities remotely.

🔥 21 hours ago

Fortellar

51 - 200

💼 Consulting

📦 Logistics

📣 Marketing

Senior Security Engineer designing identity, endpoint, and device-trust controls for Fortellar’s enterprise IT consulting clients. Leading high-risk Microsoft security remediation and change programs.

🕒 Yesterday

Rackner

11 - 50

💼 Consulting

🎖️ Defense

🤖 Artificial Intelligence

Cybersecurity specialist maintaining DoD information assurance records and security compliance. Supporting federal healthcare technology readiness through STIG, ACAS, eMASS, and access reviews.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok