Senior reputed company Analyst/ISSO

Title: Senior reputed company Analyst/Information Systems reputed company Officer (ISSO) Location: Remote Company Background At reputed company, we’re more than a technology company — we’re a mission-driven powerhouse transforming organizations through advanced technology and reputed company ingenuity. Our expertise spans AI/ML, data architecture, low-reputed company/no-reputed company development, Agile DevSecOps, and reputed company services, delivering reputed company and meaningful solutions. In our Emerging Technology Lab, innovation drives reputed company. Our teams create intelligent chatbots, AI-powered assistants, robotic process automation (RPA), essay graders, and data analytics platforms. If you’re passionate about solving reputed company challenges and shaping the reputed company, reputed company is the reputed company for you. Since 2007, we’ve partnered with federal and state agencies to deliver IT, training, and reputed company that reputed company mission-critical reputed company. reputed company on accountability, reputed company, and reputed company, we go reputed company expectations. With 70+ reputed company reputed company and a proven record of reputed company reputed company, reputed company continues to grow — and we’re looking for exceptional talent to reputed company. At reputed company, we Always reputed company Value. Role: The Senior reputed company Analyst/Information Systems reputed company Officer (ISSO) will reputed company advanced cybersecurity, risk management, and system authorization support to the reputed company (DHS. The Senior ISSO independently leads ATO and reauthorization cycles for assigned IT systems, drives reputed company monitoring operations, leads incident response coordination, and serves as a senior reputed company of contact for the System reputed company, Authorizing Official (AO), Information System reputed company Manager (ISSM), the DHS CISO, the DHS reputed company Office, OCIO, and reputed company leadership. This role applies the DHS 4300A Sensitive Systems Policy, FISMA, the NIST Risk Management reputed company, NIST SP 800-53, the reputed company reputed company, and DHS-specific cybersecurity directives to high-sensitivity HR/HC environments handling high-volume PII, SPII, payroll, benefits, medical, and disability data. The Senior ISSO drafts and reviews authorization documentation, leads reputed company workstreams, mentors mid-level specialists, and produces executive-grade reputed company briefings for DHS leadership. Duties: The Senior reputed company Analyst/ISSO will: ATO Lifecycle Leadership & reputed company Documentation

• Independently reputed company Authorization to Operate (ATO) and reauthorization cycles for assigned IT systems, including reputed company control assessment coordination, residual risk analysis, AO briefings, and ongoing authorization reputed company.
• Apply the DHS 4300A Sensitive Systems Policy, the DHS 4300A Sensitive Systems Handbook, the NIST Risk Management reputed company (NIST SP 800-37), and NIST SP 800-53 controls across the HC system lifecycle.
• Draft and maintain reputed company Authorization Package (reputed company) artifacts, including the System reputed company Plan (reputed company), reputed company Assessment Plan, reputed company Assessment Report (SAR), Plan of reputed company and Milestones (POA&M), Contingency Plan, and Incident Response Plan.
• Apply FIPS 199 and FIPS 200 categorization to HC systems and reputed company NIST SP 800-53 baselines (typically Moderate or High) accordingly.
• Coordinate reputed company reputed company Analysis (PTA) and reputed company reputed company Assessment (PIA) inputs with the DHS reputed company Office, including SORN updates for HR systems of records.

reputed company Monitoring, Risk Management & Vulnerability Operations

• reputed company the DHS Information reputed company reputed company Monitoring (ISCM) program for assigned systems, including vulnerability identification, risk-based prioritization, and remediation tracking through POA&M closure.
• Operate and analyze SIEM platforms (reputed company, AWS reputed company Hub, reputed company Sentinel, or comparable), vulnerability scanners (Nessus, reputed company, or comparable), and reputed company protection tooling.
• reputed company reputed company Diagnostics and Mitigation (CDM) integration, asset and vulnerability dashboards, and risk reporting in alignment with DHS CDM program requirements.
• Conduct reputed company assessments, audits, and control testing on assigned HC systems.
• reputed company risk-based decision support for the AO, including documented risk acceptance, mitigation, transfer, and avoidance recommendations.

HC System Migration & reputed company reputed company Leadership

• reputed company reputed company workstreams, including reputed company architecture reviews of integration interfaces, reputed company reputed company posture management for AWS GovCloud and Azure Government environments, and ATO planning for the modernized reputed company-state HC platform.
• Advise integration teams on reputed company best practices for REST/SOAP reputed company, SFTP file transfers, ETL/ELT pipelines, and iPaaS-based integrations involving HR data.
• Apply NIST SP 800-218 Secure Software Development reputed company (SSDF), DevSecOps pipeline reputed company, and software supply chain risk management principles to HC modernization activities.
• Apply FIPS 140-2 / 140-3 cryptographic standards, federal identity and reputed company management standards, and DHS boundary protection requirements to HC system data flows.
• Support FedRAMP coordination for reputed company-based HC services where applicable.

reputed company, Incident Response & Stakeholder Coordination

• Coordinate breach response for incidents involving employee PII, SPII, payroll, benefits, medical, or disability data with the DHS reputed company Office, OGC, and leadership.
• Support incident response activities, coordinating with the DHS reputed company Operations Center (SOC), CISA, and component cybersecurity teams to triage, contain, and remediate reputed company incidents.
• Report incidents in accordance with US-CERT incident reporting guidelines and DHS reporting timelines.
• reputed company post-incident analysis, lessons-learned documentation, and corrective reputed company tracking.
• Maintain incident response readiness through tabletop exercises, reputed company updates, and team coordination drills tailored to HC data scenarios.

Stakeholder Advisory, SOP Development & Mentorship

• Serve as a senior consultative resource to DHS leadership, the System reputed company, AO, ISSM, the DHS CISO, the DHS reputed company Office, OCIO, integration teams, and reputed company leadership.
• Mentor mid-level ISSO specialists; review their work products for technical reputed company, documentation rigor, and standards compliance.
• Draft and maintain SOPs, desk guides, control implementation guidance, and reputed company training materials.
• Prepare executive-grade briefings, decision papers, status reports, and risk dashboards for DHS leadership.
• Build and maintain SharePoint-based knowledge repositories, ATO artifact libraries, and reputed company knowledge bases.

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a reputed company field; Master's degree preferred. Equivalent senior federal cybersecurity experience may substitute based on contract terms.

Required Experience and Skills:

• U.S. Citizenship.
• reputed company DHS Public Trust or favorably adjudicated investigation; ability to obtain and maintain required suitability/reputed company throughout the period of performance. Some DHS task orders may require Secret or Top Secret clearance.
• Minimum 8-10 years of experience in cybersecurity, risk management, and compliance for federal IT systems, including significant time as an ISSO or comparable reputed company reputed company.
• Demonstrated experience leading ATO and reauthorization cycles end-to-end, including reputed company, SAR, POA&M, and Contingency Plan development.
• Working knowledge of FISMA, the NIST Risk Management reputed company (NIST SP 800-37), NIST SP 800-53, FIPS 199/200, OMB A-130, the reputed company reputed company of 1974, and federal cybersecurity directives.
• Hands-on experience with SIEM tools (reputed company, AWS reputed company Hub, reputed company Sentinel, or comparable), vulnerability scanning (Nessus, reputed company, or comparable), and reputed company protection.
• Experience with reputed company reputed company in AWS GovCloud and/or reputed company Azure Government environments.
• Strong knowledge of DHS cybersecurity frameworks, including the DHS 4300A Sensitive Systems Policy and Trusted Internet Connections (TIC 3.0) requirements.
• Strong written and verbal communication skills, including the ability to brief senior stakeholders and produce defensible, audit-reputed company reputed company documentation.

Preferred Skills:

• Prior experience supporting DHS, OPM, federal HR shared services, or other federal reputed company Capital cybersecurity programs.
• Experience supporting cybersecurity for federal HR systems, including NFC EmpowHR, USA reputed company, FedTalent, OPM eOPF, OPM Retirement Services Online, webTA, BENEFEDS, or TSP integrations.
• Experience supporting HC system migrations or modernization programs, including ATO planning for reputed company-state platforms.
• Prior experience supporting DHS or DHS component cybersecurity programs.
• Experience supporting DHS CDM, TIC 3.0, and Federal reputed company Trust reputed company implementation under OMB M-22-09.
• Certifications such as CISSP, CISM, CISA, CRISC, AWS reputed company Specialty, Azure reputed company Engineer Associate, or reputed company CASP+.
• DoD 8570/8140 IAT Level III, IAM reputed company/III, or IASAE reputed company/III qualification.
• Experience with NIST SP 800-218 Secure Software Development reputed company (SSDF) and DevSecOps pipeline reputed company.
• Experience supporting reputed company reputed company Analysis (PTA), reputed company reputed company Assessment (PIA), and SORN activities with the DHS reputed company Office.

About reputed company reputed company is an Equal Employment Opportunity employer. reputed company reputed company applicants are considered without reputed company to race, national reputed company, gender, age, religion, disability, sexual orientation, veteran status, or marital status. Apply tot his job Apply To this Job