Information System Security Officer – ISSO

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Assist in the development and security hardening of a DevSecOps cloud environment that adheres to DoD RMF and CMMC 2.0 standards.

• Provide support for cybersecurity governance and compliance within a DoD DevSecOps environment utilizing an Azure-based cloud infrastructure.

• Oversee all stages of Assessment and Authorization activities.

• Maintain continuous compliance with Authority to Operate requirements.

• Ensure the accuracy, completeness, and integrity of security artifacts within eMASS.

• Develop, implement, and enforce cybersecurity policies and procedures.

• Monitor changes in control inheritance and system boundaries.

• Conduct risk assessments and vulnerability testing.

• Guide engineering teams to ensure configurations align with RMF controls, Zero Trust principles, and DoD Cloud SRG requirements.

• Act as the primary liaison for government stakeholders, authorizing officials, mission partners, auditors, and engineering teams.

• Facilitate security briefings and coordinate remediation efforts.

• Collaborate with development and operations teams to foster a robust security culture.

• Monitor and respond to security incidents and threats.

• Manage security audits and assessments.

• Create and deliver security awareness training.

• Maintain collaborative relationships with the ISO, AO, SCA, and other IS ISSOs.

• Stay updated on security trends and technologies.

• Perform additional duties as assigned.

⛳️ Requirements

• Must be a U.S. citizen.

• Bachelor’s degree in cybersecurity, computer science, engineering, or a related field (or equivalent experience).

• At least 2 years of experience in cybersecurity engineering, ideally in support of DoD, federal, or regulated environments.

• Must possess a minimum of a Secret security clearance.

• Hands-on experience with Azure security tools, including the Microsoft Defender suite, Sentinel, Purview, and Azure Policy.

• Strong understanding of DevSecOps practices, CI/CD pipelines, and integrating security automation into development workflows.

• In-depth knowledge of DoD RMF, NIST SP 800-53 Rev. 5 controls, and security assessment/evidence requirements.

• Experience in implementing CMMC 2.0 or NIST SP 800-171 controls, including documentation, continuous monitoring, and audit readiness.

• Proficient in vulnerability management tools, remediation processes, and risk-based prioritization.

• Familiarity with threat intelligence platforms, adversary TTP analysis, and the development of threat-informed security detections.

• Subject to a successful background investigation, including criminal history and identity verification.

🏝️ Benefits

• Competitive benefits package within the industry.

• Awards and recognition program.

• Personalized support from ARS Senior Managers.

• Emphasis on work/life balance.

• Career development support and opportunities.

• A culture focused on employee well-being.