ISSO/Security SME at Spatial Front, Inc.

, Virginia, United States -

Full Time

Start Date

Immediate

Expiry Date

05 Jun, 26

Salary

0.0

Posted On

07 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

ISSO, Security SME, Risk Management Framework, RMF, Security Engineering, Continuous Monitoring, Agile, DevSecOps, NIST SP 800-53, ATO Artifacts, System Security Plan, POA&M, Vulnerability Management, Incident Response, Security Control Implementation, STIGs

Industry

Software Development

Description

Description Spatial Front, Inc. (SFI) is seeking an ISSO/Security SME to support our growing team. SFI was recently awarded the 2025 USA Today National Top Places to Work award and the 2025 Washington Post Top Workplaces. We are seeking an ISSO/Security Subject Matter Expert (SME) to support a large, security-sensitive federal enterprise program that includes sustained operations and ongoing modernization of a mission-critical business system. The ISSO/Security SME will provide day-to-day cybersecurity leadership, support risk management and authorization activities, and ensure security controls are implemented and monitored across multiple environments. The ideal candidate brings strong expertise in the NIST Risk Management Framework (RMF), security engineering, continuous monitoring, and working in structured delivery environments (e.g., Agile/DevSecOps) where security is embedded into the delivery lifecycle. Key Responsibilities Serve as the Information System Security Officer (ISSO) for assigned information systems and environments, overseeing cybersecurity compliance and operational security posture in accordance with RMF. Develop, maintain, and update ATO artifacts and supporting evidence, including the System Security Plan (SSP), POA&M, Security Assessment documentation, and continuous monitoring strategy. Coordinate security control implementation and verification in alignment with NIST SP 800-53, applicable federal and DoD guidance, and organizational security policies. Partner with engineering, operations, and program governance teams to integrate security into Agile/DevSecOps workflows, including security reviews, automated control evidence collection (where applicable), and release readiness gates. Manage continuous monitoring activities and reporting, including vulnerability management coordination, assessment of scan results, prioritization of remediation, and tracking to closure. Support incident response activities, including coordination, documentation, root cause support, and corrective action tracking in alignment with established procedures. Collaborate with Government stakeholders, security officials, and system owners to support authorization decisions, audits, and cybersecurity reviews. Contribute to security planning for environment changes and modernization initiatives, including boundary considerations, inheritance/reciprocity, and secure configuration baselines. Other duties as assigned. Requirements Bachelor's in Computer Science, Cybersecurity, or related field. Minimum 5 years of progressive cybersecurity experience, including RMF/ATO support. Demonstrated expertise in RMF, NIST security controls, risk assessment, security documentation, and compliance support. CISSP certification is a plus. Clearance: Must be a U.S. Citizen with an active Secret security clearance. Desired Skills Security certifications such as CISSP, CAP, or Security+ CE. Experience supporting security for large federal enterprise systems and multi-environment operations (e.g., dev/test/stage/prod). Experience serving as an ISSO within DoD or federal agency programs. Experience with vulnerability management and continuous monitoring tooling. Working knowledge of secure configuration standards (e.g., STIGs, SRGs) and secure change/configuration management practices. Familiarity with eMASS, XACTA, or similar GRC tools. Strong communication skills and ability to translate security requirements into actionable guidance for technical and non-technical stakeholders. Additional Information Clearance: Must be a U.S. Citizen with an active Secret security clearance. Work Environment: Work in the Arlington, VA office. This is a full-time, W2 position. No agencies, third parties, or Corp-to-Corp submissions. Spatial Front Inc. is an Equal Opportunity Employer — all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status. SFI participates in E-Verify.

Responsibilities

The ISSO/Security SME will provide daily cybersecurity leadership, manage risk management and authorization activities, and ensure security controls are implemented and monitored across various environments for a federal enterprise program. Key duties include developing and maintaining ATO artifacts, coordinating security control verification aligned with NIST standards, and integrating security into Agile/DevSecOps workflows.