Information System Security Manager

Salary: $160,000 - 190,000 per year Requirements:

• We require an active TS clearance; TS/SCI is preferred.
• We require a DoD 8140/8570 baseline certification, such as Security+, SecurityX (formerly CASP+), Cloud+, GSEC, or an equivalent credential.
• We prefer advanced certifications such as CISSP, CISM, GCSA, GCIA, or CISSP-ISSMP.
• We require a bachelors degree in information technology, cybersecurity, computer science, information systems, software engineering, or a related field, plus at least 5 years of relevant experience supporting Army or Navy customers through the full RMF lifecycle.
• We need demonstrated, hands-on experience managing the complete Risk Management Framework lifecycle in line with DoDI 8510.01, NIST SP 800-53 Rev. 5, and CNSSI 1253.
• We require advanced practical experience with eMASS to build, manage, and defend Assessment & Authorization packages for Navy customers.
• We need experience using vulnerability assessment tools such as ACAS/Nessus and SCAP Compliance Checker, including review of raw scan results and application of DISA STIGs and SRGs.
• We expect a proven background drafting, negotiating, and tracking POA&Ms through mitigation to achieve ATO, ATO with Conditions, or IATT.
• We require solid knowledge of system hardening across Linux and Windows, network infrastructure, containerized environments, and cloud architectures.
• We need experience embedding cybersecurity requirements into early-stage software and systems engineering workflows, including DevSecOps and shift-left practices.
• We want familiarity with SAST/DAST tools and software bill of materials management.
• Direct experience supporting Navy program offices such as NAVIFOR, NAVSEA, NAVAIR, or SPAWAR is preferred.
• Specialized certifications in audit, risk management, or cloud security, such as CISA, CRISC, CCSP, or AWS/Azure Security specialties, are desirable.

• We serve as the primary contractor cybersecurity authority and trusted advisor on-site with Government ISSMs, AODRs, and AOs.
• We lead systems and networks through the full RMF and ATO lifecycle, from early design through authorization and continuous monitoring.
• We create, maintain, and defend ATO and A&A packages in eMASS and other customer workflow systems.
• We evaluate contractor-designed architectures, software stacks, hardware configurations, and network topologies against DoD security baselines to identify and reduce risk early.
• We establish and manage continuous monitoring strategies, including annual assessments, boundary change requests, and reauthorization activities.
• We oversee vulnerability assessment tools, analyze scan results, prioritize findings, and ensure DISA STIGs and SRGs are applied.
• We draft, track, and drive remediation of POA&Ms while negotiating acceptable risk and mitigation approaches with government stakeholders.
• We collaborate with internal engineering teams to embed cybersecurity requirements into products before deployment.
• We develop and enforce hardening standards, configuration guides, SOPs, and secure development practices across company-built solutions.
• We review internal product architectures and code-related security controls, supporting SAST, DAST, dependency scanning, and zero-trust alignment.
• We lead vulnerability response and support incident reporting, containment, investigation, and remediation efforts.
• We prepare systems for government cybersecurity inspections and internal quality audits.
• We advise leadership on security posture, mission risk trade-offs, and emerging threats, translating compliance requirements into actionable technical direction.

• AWS
• Azure
• Cloud
• DevSecOps
• Hardware
• Support
• Linux
• Network
• Security
• Windows
• Incident Management

More:

We are a contractor operating in Army and Navy program environments, and this onsite role places you alongside Government ISSMs, AODRs, and AOs as a key cybersecurity liaison. The position carries a strong mission focus, combining government accreditation support with internal product security, DevSecOps, and system hardening. We offer a compensation range of $160k–$190k for candidates in Colorado, with starting pay based on qualifications, experience, and location. This is an onsite opportunity.

last updated 33 week of 2026