Information System Security Officer

Rapid Strategy is an award-winning, African-American-owned small business providing advanced cybersecurity services to federal and commercial clients. Our mission is to deliver high-impact, secure, and compliant solutions that protect critical systems and data. We are currently seeking an experienced Information Systems Security Officer (ISSO) to support a federal customer in achieving and maintaining ATO (Authority to Operate) certifications across high-side and low-side cloud environments.

This position will work closely with government stakeholders to guide cybersecurity efforts for systems hosted on NIPR, SIPR, and JWICS networks, ensuring compliance with NIST, RMF, and other federal security frameworks. If you’re an ATO expert with a passion for national defense and hands-on cybersecurity leadership, we want to hear from you.

Please note this role is 100% on-site and is only open to US Citizens with a TS/SCI. Due to the nature of this role and the requirements of the government contract, only U.S. citizens will be considered.

Responsibilities

·       Serve as the lead ISSO guiding systems through initial ATO assessments and continuous monitoring for compliance under frameworks such as RMF, ICD 503, FISMA, and FedRAMP.

·       Work directly with government stakeholders to understand security objectives, system boundaries, and data sensitivity levels—developing tailored security plans and documentation.

·       Conduct vulnerability assessments, risk analyses, and control implementations for cloud and on-prem systems across classification levels (IL5 to IL6+).

·       Monitor logs, sensors, and network traffic for indications of compromise or misconfiguration. Initiate incident response processes where required.

·       Configure and maintain security controls, including intrusion detection, firewalls, access management, and data encryption solutions in alignment with DoD and IC best practices.

·       Prepare and maintain system security artifacts such as SSPs, POA&Ms, and Security Assessment Reports (SARs) to support accreditation packages.

·       Lead the development and execution of incident response plans, including containment, investigation, and remediation coordination.

·       Interface with audit and compliance teams during system reviews, inspections, and technical testing.

Required Qualifications

·       Active TS/SCI with CI Polygraph

·       7+ years of cybersecurity experience, including hands-on ATO support for DoD or Intelligence Community systems

·       Proven success achieving and maintaining ATO certifications for systems hosted on NIPR, SIPR, and JWICS at Impact Levels 5 and 6+

·       Deep understanding of NIST 800-53, RMF, FedRAMP, and ICD 503 frameworks

·       Strong knowledge of incident response, forensic analysis, and network protocols

·       Proficiency in vulnerability scanning, SIEM tools, and security control validation techniques

·       CISSP certification or equivalent to meet DoD 8140 requirements

Who Should Apply

This role is ideal for cleared cybersecurity professionals with a proven track record in government ATO certification, particularly for classified systems. If you have led full-scope RMF engagements and have a strong grasp of cloud security controls, network architecture, and incident response in high-security environments, this is a rare opportunity to have real mission impact. We’re looking for individuals who are proactive, detail-oriented, and comfortable briefing both technical staff and executive leadership. Rapid Strategy offers competitive salary and benefits including gym memberships and healthcare. We look forward to hearing from you!