Sr. ISSO - 175309
Huntsville, Alabama
Job Id:
0000175309
Job Category:
Information Technology
Job Location:
Huntsville, Alabama
Security Clearance:
Top Secret
Business Unit:
Zachary Piper
Division:
Not Defined
Position Owner:
Cameron Bagwell
Zachary Piper Solutions is hiring for a Sr. ISSO to provide advanced security oversight, compliance monitoring, and protection of mission-critical systems within a major federal modernization program. The Senior ISSO ensures all systems, applications, data flows, and development environments adhere to federal security policies, controls, accreditation requirements, and continuous monitoring standards. This role partners with engineering, cloud, DevSecOps, QA, and operations teams to ensure security is embedded across all phases of delivery. This is a full time role located fully onsite in Huntsville, AL.
Responsibilities:
Security Governance & Compliance
· Implement and enforce federal security policies, controls, standards, and procedures
· Maintain security documentation including SSPs, POA&Ms, security checklists, and control evidence
· Support continuous monitoring activities, vulnerability scanning, and remediation tracking
· Ensure systems, applications, and cloud environments remain compliant with applicable frameworks
System Security Oversight
· Guide teams on secure architectures, data-handling requirements, and system hardening
· Validate security controls across development, testing, migration, and operational environments
· Monitor audit logs, access controls, authentication mechanisms, and system configurations
· Support accreditation processes, assessments, and readiness activities
Collaboration & Advisory Support
· Work closely with engineers, cloud teams, DevSecOps, QA automation, data migration, and product leads
· Provide security requirements, design guidance, and risk advisories during planning and development
· Participate in sprint ceremonies, technical reviews, and release readiness cycles
· Communicate risks, incidents, and mitigation strategies to leadership
Risk Management & Incident Support
· Identify security risks and coordinate mitigation strategies across teams
· Support incident response activities, root-cause analysis, and corrective action tracking
· Lead remediation efforts for findings from scans, audits, or assessments
Documentation & Reporting
· Maintain accurate and current security documentation for audits, accreditation, and compliance
· Generate reports summarizing vulnerabilities, remediation status, and security posture
· Support program leadership with security metrics, dashboards, and risk summaries
Qualifications:
· Must have an Active Top Secret Security Clearance
· Bachelor’s degree and 8+ years of experience in cybersecurity, ISSO support, or security engineering
· Strong understanding of federal security frameworks and compliance requirements
· Experience performing vulnerability scanning, interpreting findings, and driving remediation
· Proficiency with identity/access management, system hardening, logging, and auditing
· Strong communication skills for partnering with technical teams and leadership
Preferred Qualifications:
· Experience supporting federal modernization or national-security programs
· Familiarity with cloud environments (AWS strongly preferred)
· Experience with DevSecOps practices, CI/CD pipeline security, and automated scanning
· Security certifications such as CISSP, CISM, Security+, or similar
Compensation:
Salary Range: $120,000 – $140,000 (depending on experience)
Full Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave if Required by Law
This job opens for applications on September 28, 2026. Applications for this job will be accepted for at least 30 days from the posting date.
#LI-CB1
#LI-REMOTE
Keywords: Cybersecurity, ISSO, ATO, Assessment and Authorization, Risk Management Framework, RMF, NIST, FISMA, DOE, NNSA, Compliance, POA&M, Vulnerability Management, Incident Response, Security Documentation, System Security Plans, Continuous Monitoring, Cyber Risk Assessment, Federal Security, Information Assurance, Security Operations, Policy Development, Threat Mitigation, Authorization to Operate, top secret, software, network, infrastructure, cloud, AWS