Cybersecurity Specialist (ISSO)

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™

ASRC Federal Agile Decision Sciences LLC is seeking an Information System Security Officer (ISSO) / Cybersecurity Specialist to support mission-critical federal systems for NASA’s Space Communications and Navigation (SCaN) program. The ideal candidate brings comprehensive experience managing federal Assessment and Authorization (A&A) lifecycles, navigating the NIST Risk Management Framework (RMF), and maintaining cybersecurity compliance across multiple hybrid and cloud-hosted environments.

Work Location: Hybrid, Washington DC or Greenbelt MD

Responsibilities

• Serve as the dedicated ISSO across a multi-system portfolio, managing ongoing Continuous Monitoring (ConMon), assessment preparation, and full Assessment and Authorization (A&A) lifecycles to achieve and maintain Authorities to Operate (ATO).
• Develop, update, and maintain comprehensive System Security Plans (SSPs), Risk Assessment Reports (RAR), Contingency Plans, PIA/PTAs, system architecture/network diagrams, and supporting authorization artifacts within RISCS.
• Manage and track Plans of Action and Milestones (POA&Ms) and Risk-Based Decisions (RBDs) through remediation and closure.
• Evaluate vulnerability scan results, identify technical security weaknesses, and coordinate remediation and mitigation actions with engineering, SOC, and systems administration teams.
• Coordinate and conduct annual security control assessments, self-assessments, gap analyses, and contingency plan testing/training.
• Prepare and support ATO briefings, Change Control Board (CCB) reviews, and security impact analyses for system modifications.
• Draft, review, and maintain system interconnection documentation, including Interconnection Security Agreements (ISAs), MOUs, and MOAs for external and cross-system onboarding.
• Transition legacy on-premises control implementations to cloud-native AWS environments and validate cloud security tools and shared responsibility models.
• Collaborate closely with Authorizing Officials (AOs), System Owners, engineering teams, and program leadership to align security compliance with operational mission objectives.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (or equivalent professional experience).
• 6+ years of direct experience supporting cybersecurity governance, risk management, and compliance (GRC) or ISSO duties for federal information systems.
• Strong working knowledge of NIST SP 800-53 (Rev. 5), NIST RMF (SP 800-37), FISMA, and federal cybersecurity compliance standards.
• Proven track record creating, maintaining, and assessing authorization packages (SSPs, POA&Ms, RBDs, SARs) and executing continuous monitoring strategies.
• Experience evaluating vulnerability scan outputs, identifying vulnerabilities, and driving technical remediation across cross-functional teams.
• Familiarity with cloud security concepts, AWS environments, and the shared responsibility model.
• Strong technical writing, analytical, and stakeholder coordination skills, with demonstrated experience managing multiple competing security packages simultaneously.
• U.S. Citizenship required; ability to obtain and maintain a Secret clearance.
• Travel may be required occasionally

Preferred Qualifications

• Prior experience supporting NASA cybersecurity policies, processes, and tools (including hands-on experience with RISCS).
• Familiarity with NASA Space Communications and Navigation (SCaN) operations, mission communications, or ground infrastructure.
• Active cybersecurity certification (e.g., CISSP, CISM, CAP/CGRC, Security+, or AWS Certified Security).
• Practical experience establishing and reviewing Interconnection Security Agreements (ISAs) and onboarding customer systems.
• Knowledge of Zero Trust Architecture principles, ICAM, network segmentation, and secure interconnectivity.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, sex, color, age, national origin, religion, disability, protected veteran status, or any other factor prohibited by applicable law.