(781) Cybersecurity Technical Specialist Level III / ISSO

Company Summary

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions. Our reputation reflects the high quality of the talented Arlo Solutions team and the consultants working in partnership with our customers. Our mission is to understand and meet the needs of both our customers and consultants by delivering quality, value-added solutions. Our solutions are designed and managed to not only reduce costs, but to improve business processes, accelerate response time, improve services to end-users, and give our customers a competitive edge, now and into the future.

Position Overview

Arlo Solutions seeks an experienced Cybersecurity Technical Specialist III / ISSO to support U.S. Army ATEC cybersecurity operations. The position provides technical expertise in DoD Risk Management Framework (RMF), security-control analysis, vulnerability management, eMASS, POA&M management, and Continuous Monitoring. Candidates must reside near APG or independently relocate before employment.

Full-time, on-site attendance at the Government installation is mandatory. RMF Execution:

• Perform assigned RMF activities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army requirements.

Security Controls:

• Analyze control implementations, technical configurations, compliance evidence, and deficiencies

• develop accurate implementation statements and corrective recommendations.

eMASS Management:

• Maintain assigned authorization packages, security controls, artifacts, findings, and supporting documentation for ATO/IATT and Continuous Monitoring activities.

Vulnerability Management:

• Review ACAS, SCAP, STIG, and other assessment results;

• validate findings, coordinate remediation, and maintain accurate tracking records.

POA&M Management:

• Document weaknesses, track remediation milestones, validate corrective actions, and maintain supporting evidence and traceability.

Continuous Monitoring:

• Conduct recurring security reviews, identify emerging risks, monitor compliance, and report material cybersecurity changes.

Technical Quality Assurance:

• Independently verify technical accuracy, completeness, evidence, and compliance before submitting deliverables.

Incident Coordination:

• Report significant vulnerabilities, suspected incidents, and security deficiencies through authorized channels.

• Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders to obtain evidence, validate configurations, resolve findings, and accomplish assigned RMF responsibilities.

• Maintain operational leadership visibility and communicate progress, obstacles, and cybersecurity risks professionally.

• Prepare and present accurate technical briefings covering RMF activities, vulnerabilities, security controls, POA&Ms, and Continuous Monitoring.

• Explain findings, supporting evidence, risks, remediation recommendations, and outstanding actions.

• Provide timely status updates and identify issues requiring leadership attention.

• The assigned Team Lead/O-ISSM serves as the primary operational tasking lead, operating under the oversight of the Project Lead, Program Manager, and authorized Government TPOC.

• Employees must follow reasonable, authorized direction from designated leadership, meet established deadlines, and promptly communicate conflicting instructions, technical concerns, or delays.

• System assignments do not confer exclusive ownership or independent managerial, ISSM, SCA, or Authorizing Official authority.

Professional Attire:

• Maintain APG/ATEC-required professional business attire throughout on-site duty hours, subject to approved exceptions.

Professionalism:

• Demonstrate respect, integrity, accountability, courtesy, and constructive workplace communication.

Customer Relations:

• Maintain professional Government relationships and follow established communication and escalation procedures.

Teamwork:

• Collaborate effectively, respect leadership responsibilities, accept constructive feedback, and support mission priorities.

Technical Accuracy:

• Validate all assigned technical work before submission; promptly correct identified deficiencies.

Policy Compliance:

• Follow Arlo Solutions Employee Handbook requirements, Government workplace policies, security procedures, and authorized operational direction.

Performance Standard:

• Deliver accurate, timely, technically defensible cybersecurity work while maintaining professionalism, accountability, effective communication, and continuous support of the U.S. Army ATEC mission.

Work Location: (On-site Requirements) Aberdeen Proving Ground, MD

Clearance: Active Secret clearance.

Responsibilities and/or Success Factors:

• Execute assigned RMF responsibilities under DoDI 8510.01, NIST SP 800-37, NIST SP 800-53/53A, CNSSI No. 1253, and applicable Army cybersecurity requirements.

• Support system categorization, security-control implementation, assessments, authorization, and Continuous Monitoring.

• Analyze technical configurations, control implementations, compliance evidence, and cybersecurity documentation. Identify deficiencies, unsupported compliance assertions, and documentation inconsistencies; recommend corrective actions.

• Support ATO, IATT, reauthorization, and ongoing authorization requirements.

• Develop, review, maintain, and validate assigned eMASS authorization packages, security controls, implementation statements, assessment evidence, and findings.

• Ensure documentation accurately reflects system configurations, security posture, and compliance status.

• Maintain traceability between security controls, supporting evidence, assessment findings, and POA&Ms.

• Coordinate authorization-package updates, quality reviews, and submissions through established RMF leadership.

• Evaluate NIST SP 800-53 security controls against documented implementations and technical evidence.

• Validate findings, identify compliance gaps, distinguish false positives, and assess inherited controls.

• Develop defensible recommendations for remediation, mitigation, additional assessment, or risk acceptance.

• Coordinate technical validation with authorized System Administrators and cybersecurity stakeholders.

• Review ACAS, SCAP, DISA STIG, and other approved vulnerability assessment results.

• Identify vulnerabilities, configuration weaknesses, affected assets, and compliance deficiencies.

• Conduct recurring vulnerability reviews and maintain accurate Government-approved tracking records.

• Develop and maintain POA&Ms documenting findings, risks, remediation milestones, and supporting evidence.

• Validate remediation before recommending closure; escalate significant unresolved risks.

• Perform recurring security-control reviews, vulnerability assessments, compliance checks, and cybersecurity reporting.

• Identify system changes, emerging threats, and conditions affecting authorization or cybersecurity posture.

• Support Continuous Monitoring documentation, corrective actions, and risk tracking.

• Promptly report suspected incidents, significant vulnerabilities, and security-control failures through authorized channels.

• Support incident-response coordination without independently accepting risk or approving exceptions.

• Prepare accurate, complete, traceable, and technically defensible cybersecurity deliverables.

• Independently verify technical findings, asset identifiers, control mappings, vulnerability references, and evidence before submission.

• Correct errors, unsupported assertions, and documentation inconsistencies promptly.

• Maintain version control, documentation integrity, and compliance with established quality standards.

• Collaborate with Team Leads, ISSMs, System Administrators, security assessors, and Government stakeholders.

…