Junior Information System Security Officer (Remote)

About the Role and Company

Dragonfli Group is a cybersecurity and IT consulting organization catering to federal agencies and Fortune 100 companies. With headquarters in Washington, DC, they support safeguarding critical systems in on-site, hybrid, and fully remote setups. They are seeking a Junior Information System Security Officer (ISSO) to join a federal cybersecurity team managing a large-scale system authorization and monitoring program based on the NIST Risk Management Framework (RMF). This entry-level position suits candidates with a solid IT or security foundation or military experience, even if they lack direct ISSO experience. The role involves collaboration with senior ISSOs to maintain System Security Plans and manage Plans of Action and Milestones among other key tasks.

Key Responsibilities

• Assist with RMF lifecycle steps for federal information systems including categorization, control implementation, assessment, and ongoing monitoring under supervision
• Help draft and revise system security documents such as System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms)
• Track and document system control issues and vulnerabilities through resolution
• Support continuous monitoring efforts like log review and vulnerability scanning in collaboration with senior ISSOs
• Maintain system inventory, hardware/software baselines, and interconnection documentation
• Contribute to incident response documentation, escalation tracking, and remediation follow-ups
• Participate in security audits, inspections, and reviews as a team member
• Coordinate with Information System Owners and other stakeholders on routine compliance matters
• Acquire applied knowledge of federal directives such as FISMA and OMB A-130 through on-the-job training

Required Qualifications

• 0 to 2 years of experience in IT, cybersecurity, information assurance, or related military/government roles; direct ISSO experience not mandatory
• Understanding of NIST RMF and SP 800-53 security controls via training, coursework, or certification preparation
• U.S. Citizenship and ability to clear a background check for a Public Trust designation
• Capability to work remotely while collaborating during core business hours (9am–5pm ET)
• Strong writing skills for clear communication

Preferred Attributes

• Background in IT, communications, electronics, or related security fields
• Experience with governance, risk, and compliance (GRC) tools such as eMASS or Xacta
• Bachelor’s degree in IT, cybersecurity, or equivalent experience
• Knowledge of identity and access management (IAM), credentialing, or access control processes
• Familiarity with FISMA and OMB A-130 mandates
• Current CompTIA Security+ or (ISC)² Certified in Cybersecurity (CC) certification is advantageous

Technical and Soft Skills

• Core understanding of RMF fundamentals and Authority to Operate (ATO) lifecycle
• Basic awareness of NIST 800-53 control families
• Concepts related to identity and access management and access control
• Exposure to GRC or vulnerability scanning tools such as ACAS or STIGs is a plus
• Proficiency in documentation and technical writing including SSPs and POA&Ms
• Experience with Microsoft Office and SharePoint platforms
• Effective written and oral communication skills
• Detail-oriented with dependable follow-through and the ability to learn rapidly under senior supervision
• Experience collaborating across geographically dispersed teams remotely
• Handling sensitive information with discretion and reliability
• Self-driven and motivated for remote work setting

Benefits

• Health insurance with multiple POS options including HSA-compatible plans
• Dental coverage with PPO plans covering preventive, basic, and major services
• Vision benefits including annual exams, frames, lenses, and contact lenses allowance
• 401(k) retirement plan with employer match up to 5% of eligible pay
• Fully employer-paid long-term disability at 50% of pre-disability income
• Life and accidental death & dismemberment insurance coverage of $10,000 fully paid by employer
• Paid time off and 11 federal holidays

Additional Information

Applicants must be U.S. Citizens or permanent residents with the ability to work within the continental United States. Candidates with previous federal contracting experience are preferred. The role involves conducting all duties while remote within the U.S. region.