> Markdown version of [/jobs/ext/1183558-information-systems-security-officer-ii-iii](https://www.wearedevelopers.com/jobs/ext/1183558-information-systems-security-officer-ii-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer II/III - **Company:** Xsite Llc - **Location:** San Diego, CA, United States (Remote available) - **Experience:** Expert - **Salary:** $95,000.0 - $141,000.0 - **Contract:** Permanent contract - **Skills:** Configuration Management, Cyber Security, Information Systems, Information Security Management, Network Diagrams, Software Vulnerability Management, SARS Software Products, C4i, SC Clearance, Information Technology, Nessus, Plan of Action and Milestones - **Published:** July 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3ae830af1905e508 ## About the Role * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, Business, Management, or a related technical or managerial field preferred. Additional relevant cybersecurity, military, Navy, RMF, A&A, or information assurance experience may be considered in lieu of degree. * 3-10 years of practical experience in cybersecurity, information assurance, engineering, test and evaluation, RMF, A&A, C&A, or related information system security support. * Experience supporting RMF, A&A, ATO lifecycle, cybersecurity compliance, or Navy/DoD information system security activities. * Experience preparing, maintaining, or reviewing cybersecurity artifacts and compliance documentation in support of ATO requirements. * Experience with Information Assurance tools such as eMASS and ACAS/Nessus. * Working knowledge of RMF, ATO requirements, POA&M tracking, vulnerability management, security controls, and information system security posture maintenance. * Active U.S. Secret clearance preferred; ability to obtain and maintain required clearance is required. * Strong written and verbal communication skills, with the ability to coordinate across technical teams, Government stakeholders, and program leadership., * Prior experience supporting PMW/A 170, PEO C4I, NAVWAR, NIWC, Navy PNT systems, or other Navy C4I/cybersecurity programs. * Current DoD 8140/8570-compliant certification such as Security+, CAP, CASP+, CISSP, CISM, GSLC, or equivalent. * Experience supporting classified and/or mission-critical Navy or DoD systems. * Experience with POA&M management, vulnerability remediation coordination, annual security reviews, continuous monitoring, and ATO sustainment. * Familiarity with CYBERSAFE, Cross Domain Solution documentation, Navy authorization packages, or Security Control Assessor coordination. * Experience supporting system boundary validation, hardware/software baselines, configuration control, or Baseline Change Requests. ## Description * Support Risk Management Framework (RMF), Assessment & Authorization (A&A), and Authorization to Operate (ATO) activities for Navy/DoD information systems. * Develop, review, maintain, and update cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), Security Categorization documentation, Privacy Impact Assessments, and related A&A artifacts. * Support continuous monitoring, annual security reviews, control validation, and audit-readiness activities. * Coordinate with system owners, engineers, administrators, Security Control Assessors, Authorizing Officials, and other stakeholders to support cybersecurity compliance and risk management. * Track, document, and support remediation of vulnerabilities, STIG findings, POA&M items, and other cybersecurity risks. * Use cybersecurity and information assurance tools such as eMASS, ACAS/Nessus, STIG Viewer, and related DoD/Navy systems as required. * Support configuration management and baseline change activities to ensure cybersecurity impacts are identified, documented, and addressed. * Assist with cybersecurity inputs for system changes, boundary updates, hardware/software lists, network diagrams, and authorization packages. * Maintain awareness of applicable DoD, Navy, and federal cybersecurity policies, including RMF, NIST SP 800-53, DoDI 8510.01, and DoD 8140/8570 workforce requirements. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)