Information System Security Officer - Dol
$160k - $165k/yr
Senior
Washington, DC, USA
HybridHybrid schedule: in-office 2 days per week.
CybersecuritySecurity Governance, Risk & Compliance
No H1B Sponsorship
US Citizenship Required
About the job
Requirements
- At least 5 years of federal cybersecurity, Information System Security Officer, Risk Management Framework, Authorization to Operate, or security compliance experience.
- Hands-on experience with FISMA Moderate, NIST 800-53, Risk Management Framework, POA&M management, vulnerability management, security documentation, and Authorization to Operate support.
- Experience supporting Department of Labor IT programs is required.
- Experience coordinating remediation across application, database, infrastructure, and DevSecOps teams.
- Strong understanding of federal security documentation, security control assessment findings, remediation planning, and continuous monitoring.
- U.S. citizenship and ability to obtain and maintain Department of Labor Public Trust suitability are required.
- Prior Department of Labor Office of the Chief Information Officer, Employment and Training Administration, CSAM, Authorization to Operate, or federal civilian Information System Security Officer experience.
- Security+, CISSP, CISM, CAP, CGRC, CEH, or equivalent security certification.
- Experience with Splunk, ServiceNow, Jira, Confluence, SolarWinds, static and dynamic application security testing, and vulnerability scanning tools.
Responsibilities
- Lead SWARAS FISMA Moderate compliance support, including NIST 800-53 controls, NIST 800-171 alignment, FIPS, HSPD-12/PIV, TIC, and Department of Labor security policy compliance.
- Maintain CSAM artifacts, system security documentation, security and privacy plans, risk registers, POA&Ms, audit responses, and Authorization to Operate support documentation.
- Analyze vulnerability scan results, audit findings, penetration testing results, and security control assessments, then coordinate remediation with DevSecOps, database administrator, and system owner stakeholders.
- Track POA&M milestones, remediation timelines, evidence packages, and closure documentation within government-defined timelines.
- Support secure software development lifecycle controls, code review evidence, static and dynamic testing evidence, third-party and open-source component tracking, and security release gates.
- Support incident response requirements, including rapid escalation for personally identifiable information-related incidents and coordination with Department of Labor Office of the Chief Information Officer security stakeholders.
- Provide security input for Capital Planning and Investment Control reporting, portfolio data calls, continuous monitoring, and governance reviews.
About the company
TechSur Solutions delivers technology services to government clients, building user-focused digital experiences and integrating software across a client’s tech stack. It uses agile methods to design, build, and implement software with early visual progress to help manage costs, and provides data analytics over large datasets to illuminate the ecosystem of services and technologies. The company differentiates itself through SBA-certified 8(a), SDB, and EDWOSB designations and a Total Engagement philosophy that centers on practical, government-user needs. Its goal is to win and execute federal contracts by delivering usable, integrated digital solutions and data insights that improve government operations.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Reston, Virginia
Founded
2016
Get referred to TechSur Solutions
See people who can refer or advise you
Simplify's Take
What believers are saying
- Sridhar Kesiraju joined October 21, 2025, bringing IMLS cloud and cybersecurity modernization experience.
- TechSur's Oracle partnership expands federal cloud delivery and compliance capabilities.
- Its GSA STARS III option runs through December 28, 2026, preserving near-term buying channels.
What critics are saying
- Revenue depends on federal procurement cycles; missed recompetes can instantly cut backlog.
- The FDA FURLS contract sits inside FusionEdge JV, diluting TechSur's direct customer control.
- Losing 8(a) or socio-economic certifications would cripple its core win-rate and survival.
What makes TechSur Solutions unique
- TechSur's FusionEdge JV won FDA FURLS modernization on March 23, 2026.
- It holds GSA 8(a) STARS III, OASIS+, MDA SHIELD, and SeaPort NxG access.
- TechSur markets AI-native, FedRAMP-ready federal systems across civilian, defense, and health agencies.
Help us improve and share your feedback! Did you find this helpful?