Information System Security Officer

What you'll do

• Perform continuous monitoring by reviewing security logs, audit records, alerts, and vulnerability results to identify anomalies.
• Manage the Risk Management Framework (RMF) process to develop evidence for system authorization and ongoing compliance.
• Maintain the Security Control Traceability Matrix (SCTM) and other documentation required for audit readiness and accreditation.
• Track security findings, vulnerabilities, and control deficiencies while managing Plans of Action and Milestones (POA&Ms).
• Collaborate with engineering and operations teams to implement secure system architectures, designs, and configurations.
• Produce and maintain cybersecurity design documentation, operating procedures, and evidence packages for security controls.
• Coordinate incident response activities by supporting log availability, event triage, and post-event corrective actions.
• Communicate technical cybersecurity risks and mission impacts clearly to both technical and non-technical stakeholders.

What we're looking for

• U.S. citizenship is required for this position.
• A Department of Defense Secret security clearance is required at the time of hire.
• A Bachelor's degree in Engineering, Science, or Mathematics with 2 years of experience, or a Master's degree with 6 months of experience is required.
• Knowledge of NIST RMF, NIST SP 800-53 security controls, and DoD cybersecurity authorization processes is required.
• Experience performing continuous monitoring, vulnerability management, and incident reporting/escalation is required.
• Ability to communicate technical cybersecurity topics effectively to both technical and non-technical audiences is required.
• Proficiency in managing Security Control Traceability Matrices (SCTM) and Plans of Action and Milestones (POA&Ms) is required.
• Preferred certifications include CISSP, Security+, CEH, CAP, or CISM.