Posting record
Open 12+ days
- C3EL's site dates the posting
- Ghostless first sees this listing
- Last checked: still up
How we know
It hasn't been reposted, listed twice, or left up unusually long, and the posting doesn't say it's a talent pool.
Ghostless records the day it first sees a posting, so a repost can't reset its age. This one was already up when Ghostless started tracking C3EL, so its true age is longer.
Last checked Nov 4, 2026.
How well do you match?
See how much of this posting your resume shows, and what it's missing.
Upload your resumeWhat it asks of you
- Security clearance required
What the posting discloses
Not stated: Pay, real vacancy, AI screening.
Why these three
Ontario requires postings from employers with 25 or more staff to state the pay, whether the vacancy exists, and whether AI screens applicants.
Some employers add pay only on their own site. Check the original posting before you rule it out.
Skills mentioned
About the role
**CONTINGENT UPON CONTRACT AWARD**
Overview
Job Title: Senior Information System Security Officer (ISSO)
Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust
Location : Washington, D.C.
(Due to the nature of the work and contract requirements, U.S. Citizenship is required. )
Description
C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new contract. This role will serve as Operational Specialist for Splunk, ServiceNow, ConMon, vulnerability management, POA&M, and incident and change coordination, as well as being workstream lead and secondary backup for Lead ISSO duties.
Responsibilities will include, but not be limited to
- Provide on-site cybersecurity and RMF sustainment support.
- Maintain traceability between ServiceNow remediation tickets and CSAM POA&M records.
- Analyze findings, validate false positives, and prioritize remediation using CVSS, CISA KEV, exposure, exploitability, and mission impact.
- Support notification, triage, CSAM context retrieval, Splunk verification, SitReps, RCA, corrective actions, and post-incident updates.
- Support CAB/CCB/ERB reviews, security impact analysis, artifact updates, and post-change verification.
- Track audit, penetration-test, and assessment findings through corrective action and evidence-supported closure.
- Maintain incident-response plans and support tabletop or functional exercises.
- Produce accurate, concise, and audit-ready Government cybersecurity documentation.
- Support team coverage from 7:00 a.m. to 6:00 p.m. ET (M-F) and participate in after-hours incident coverage as needed.
Minimum Qualifications
- U.S. Citizenship.
- Eligibility to obtain a Tier 4 High-Risk Public Trust.
- Minimum seven (7) years of cybersecurity.
- Minimum five (5) years in federal ISSO, ConMon, vulnerability, security operations, or compliance work.
- Working knowledge of NIST SP 800-37, 800-53, 800-53B, FIPS 199, FISMA, and applicable CISA/OMB guidance.
- Familiarity with GRC, ITSM, SIEM, scanner, identity, endpoint, and cloud-security platforms.
- Direct experience with Splunk searches, dashboards, ingestion verification, log coverage, and incident timeline support.
- Direct experience with ServiceNow incidents, problems, changes, remediation tickets, and reporting.
- Direct experience with Tenable Nessus, Qualys, ACAS, or comparable Government-approved scanners.
- Experience with Defender, Intune, BigFix, or equivalent endpoint and configuration platforms.
Preferred Qualifications
- At least one current cybersecurity certification such as CISSP, CGRC, CISM, CRISC, Security+, SecurityX, CCSP, or GIAC.
Education
- Associate’s degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)
Something wrong with this posting?