Job ID: 113702
Location: Kearneysville, West Virginia [Remote]
Category: App/Dev
Employment Type: Contract
Date Added: 10/01/2026
Apply Now
Back to Search
Thank you for applying. Someone will be contacting you shortly.
Uploading Resume...
Creating Application...
Finishing up...
Apply Now
Fill out the form below to submit your information for this opportunity. Please upload your resume as a doc, pdf, rtf or txt file. Your information will be processed as soon as possible.
An error has occurred. Please close this dialog and try again.
Please complete the entire form below to apply.
First Name*
Last Name*
Email*
Phone (US Phone Numbers Only)*
City
State of Residence Select a state... Alabama Alaska Arizona Arkansas California Colorado Connecticut Delaware District Of Columbia Florida Georgia Hawaii Idaho Illinois Indiana Iowa Kansas Kentucky Louisiana Maine Maryland Massachusetts Michigan Minnesota Mississippi Missouri Montana Nebraska Nevada New Hampshire New Jersey New Mexico New York North Carolina North Dakota Ohio Oklahoma Oregon Pennsylvania Rhode Island South Carolina South Dakota Tennessee Texas Utah Vermont Virginia Washington West Virginia Wisconsin Wyoming
Click Yes to subscribe to jobs from our Talent Network
Yes
Newsletter Interests
Other PMO/BA Infrastructure App/Dev
Resume Required Required*
(Word, PDF, RTF, TXT)
Please complete the entire form below to apply.
Apply Now
Notice: Job application forms are locked until Analytics cookies are accepted for fraud prevention tracking. Please click the cookie settings banner to unlock.
As an Information Systems Security Engineer (ISSE) / Information Systems Security Officer (ISSO), you will serve as the primary cybersecurity subject matter expert responsible for security engineering, system authorization, compliance, and risk management activities. You will partner with system owners, engineers, architects, and government stakeholders to ensure systems maintain compliance with federal cybersecurity requirements while supporting mission objectives.
RMF & Authorization Support
- Lead and manage the Risk Management Framework (RMF) lifecycle for assigned systems.
- Develop, maintain, and update authorization artifacts including SSPs, SARs, Security Scorecards, POA&Ms, IRPs, Contingency Plans, Threat Assessments, and network boundary diagrams.
- Coordinate activities supporting Authority to Operate (ATO), Interim ATO, and system reauthorization efforts.
- Ensure cybersecurity documentation remains current and accessible to authorized personnel.
ISSO Operations & Compliance
- Serve as the primary ISSO/aISSO supporting compliance with DHS, DoD, NIST, and cybersecurity requirements.
- Conduct security control assessments and ensure implementation of NIST 800-53 security controls.
- Support internal and external cybersecurity audits, inspections, and assessment activities.
- Track and report system compliance status, security findings, and overall risk posture.
Security Engineering & Architecture
- Review system architectures, data flows, interfaces, and interconnections to identify security risks and required protections.
- Provide cybersecurity engineering guidance throughout the system development lifecycle.
- Evaluate proposed system changes for security impacts and recommend mitigation strategies.
- Develop and maintain Interconnection Security Agreements (ISAs), MOUs, SLAs, and connection approval packages.
POA&M and Risk Management
- Manage Plan of Action & Milestones (POA&M) activities from identification through closure.
- Coordinate remediation efforts across technical teams and stakeholders.
- Validate corrective actions and collect closure artifacts.
- Prepare risk acceptance packages and waiver documentation when required.
Vulnerability Management
- Conduct vulnerability assessments using ACAS, Nessus, SCAP, SCC, and other approved security tools.
- Perform Security Readiness Reviews (SRRs) and support security control validation activities.
- Analyze and prioritize vulnerabilities based on risk and mission impact.
- Track remediation activities and ensure timely resolution of findings.
Continuous Monitoring (ConMon)
- Execute continuous monitoring activities in accordance with RMF requirements.
- Monitor system security posture and identify emerging threats or weaknesses.
- Review security dashboards and compliance metrics and provide recommendations for improvement.
- Support ongoing assessment and authorization activities.
Change & Configuration Management
- Participate in Change Control Boards (CCBs) and configuration management activities.
- Conduct Security Impact Analyses (SIAs) for system modifications and enhancements.
- Ensure cybersecurity requirements are incorporated into approved changes.
Incident Response & Security Operations
- Support incident response activities and coordinate with CGCYBER, SOC, and enterprise cybersecurity organizations.
- Investigate security events, analyze findings, and document corrective actions.
- Review HBSS/EDR reporting and support endpoint compliance efforts.
- Assist with forensic investigations and threat response activities as required.
Audit & Log Review
- Perform regular reviews of audit logs, security alerts, and intrusion detection reports.
- Analyze security events and identify suspicious activity or trends.
- Review exception requests and provide security recommendations to government stakeholders.
- Document findings and support audit readiness requirements.
Contingency Planning & Testing
- Coordinate annual contingency plan testing and disaster recovery exercises.
- Support continuity planning activities and ensure documentation remains current.
- Track corrective actions resulting from testing events and exercises.
Qualifications
- High School Diploma and 9+ years of related cybersecurity experience (or equivalent combination of education and experience).
Required Skills & Experience
- DoD 8570/8140 IAT Level II certification (Security+ CE, CySA+, CCNA Security, or equivalent).
- 5+ years of experience performing ISSO, ISSE, Information Assurance, or Cybersecurity Engineering functions within a federal government environment.
- Extensive experience supporting NIST RMF authorization and accreditation processes.
- Experience developing and maintaining RMF artifacts including SSPs, SARs, POA&Ms, Security Plans, and Assessment documentation.
- Strong knowledge of NIST 800-53, FISMA, DHS cybersecurity requirements, and federal compliance frameworks.
- Experience performing vulnerability management utilizing ACAS, Nessus, DISA STIGs, and SCAP tools.
- Understanding of enterprise networking, cloud environments, system architecture, and security engineering principles.
- Experience supporting continuous monitoring, audits, inspections, and security control assessments.
- Ability to communicate cybersecurity risks to technical and non-technical stakeholders.
- Experience using enterprise ticketing and risk management platforms such as ServiceNow, Jira, Azure DevOps, or eMASS.
Preferred Skills & Experience
- Active Secret Clearance (or ability to obtain and maintain one).
- CISSP, CAP, CISM, CASP+, GSLC, or similar advanced cybersecurity certification.
- Experience supporting eMASS or other government authorization management tools.
- Knowledge of PEO C5I cybersecurity policies and authorization processes.
- Familiarity with cloud security architectures within AWS and Azure environments.
- Understanding of DevSecOps, container security, Kubernetes, and continuous ATO (cATO) concepts.
- Experience supporting Security Control Assessor (SCA) engagements and independent verification activities.
About GDH:
At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.
Who We Are:
GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.
GDH Benefits
GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company. Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services. Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans. Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more! For more detailed information on benefits, please go to GDH's website under the tab for candidates.
GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department.
Please visit our notice of collection for California applicants.
Apply Now
View All Jobs