> Markdown version of [/jobs/ext/1480070-cds-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/1480070-cds-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CDS Information Systems Security Officer (ISSO) - **Company:** General Dynamics Information Technology - **Location:** Ramstein-Miesenbach, Germany - **Experience:** Experienced - **Salary:** €106,250.0 - €143,750.0 - **Contract:** Permanent contract - **Skills:** Xacta, BASIC (Programming Language), Ubuntu (Operating System), CentOS, Command-Line Interface, Cyber Security, Information Systems, Linux, Information Security Management, Linux System Administration, Log Analysis, Network Administration, Red Hat Enterprise Linux, Data Streaming, Data Logging - **Published:** July 29, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=764665a82c5ade9a ## About the Role * Strong Linux experience (e.g., RHEL/CentOS/Ubuntu), including command-line, log analysis, and basic system administration. * Experience supporting DoW Risk Management Framework (RMF) and continuous monitoring activities. * Experience reviewing DISA STIGs and correlating vulnerability findings with system logs and configuration settings. * Working knowledge of NIST SP 800-53 Rev. 5 controls, particularly the AU (Audit) and SI (System and Information Integrity) control families. * Experience conducting security audits, direct log/telemetry review on Linux systems, incident investigations, and preparing associated documentation or reports., * BA/BS + 12 yrs exp (8 yrs cybersecurity experience) OR * MA/MS + 8 yrs exp (7 yrs cybersecurity experience) OR * Ph.D. + 6 yrs exp (2 yrs cybersecurity experience) OR * No Degree + 13 yrs exp (7 yrs cybersecurity experience), 8 + years of related experience * may vary based on technical training, certification(s), or degree ## Description Advance your career while impacting our national security in cyber as a Cybersecurity Analyst Senior at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government. The Cybersecurity Auditor / Information Systems Security Officer (ISSO) is responsible for maintaining the operational security posture of assigned Cross Domain Solution (CDS) systems at the enclave level (AFSCI, AOC SIPRNet, SIPRNet, ACBN and Private ISP), ensuring continuous compliance with Department of War (DoW), National Cross Domain Strategy & Management Office (NCDSMO) "Raise-the-Bar" (RTB) Standards, and Intelligence Community (IC) security requirements, with a strong emphasis on Linux-based security auditing and continuous monitoring. This role works closely with the Information System Security Manager (ISSM), system owners, enclave teams, and CDS engineering staff to execute day-to-day security operations focused on: * Direct audit and review of CDS system logs and security-relevant events * Continuous monitoring of guard behavior and data flows * Validation of enforcement rules and configuration baselines * Collection and organization of bodies of evidence for RMF and assessments The Cybersecurity Auditor / ISSO provides technical expertise in: * Linux system administration and command-line analysis * Native log review and correlation (e.g., syslog, auditd, application logs) * Transfer decision validation and sanitization evidence review * Development of procedures and checklists for recurring security audits This work ensures compliance with NIST SP 800-53 Rev. 5, DoWI 8510.01, and NCDSMO-R-00008-005_01 Version 5.1, and helps maintain CDS systems in an audit-ready, fail-secure posture. RESPONSIBILITIES* Assist the ISSM in meeting assigned duties and responsibilities in accordance with DoDI 8510.01 and NIST RMF guidance. * Conduct continuous monitoring activities for assigned authorization boundaries, with specific focus on CDS guard behavior and data flows. * Perform detailed security audits directly on Linux-based CDS systems, including review of operating system, application, and custom guard logs. * Monitor guard behavior and validate data flow enforcement rules to ensure only authorized transfers occur across domains. * Develop and maintain procedures for Linux log collection, rotation, retention, and secure storage to support audit requirements. * Prepare, review, and update authorization documentation related to audit and monitoring controls (e.g., SSP sections, monitoring procedures, control implementation summaries). * Conduct periodic reviews of information systems to ensure compliance with the security authorization package and applicable policies. * Assess the security impact of system changes (e.g., configuration updates, patching, rule changes) and provide recommendations to the ISSM prior to implementation. * Validate time synchronization, log integrity, and audit completeness across CDS components. * Identify and troubleshoot logging gaps, misconfigurations, or failures directly on Linux systems (e.g., auditd, rsyslog, custom logging services). * Provide log extracts, audit trails, and evidence packages to support internal and external audits and assessments. * Ensure audit records are reviewed and documented, including identification, investigation, and resolution of anomalies. * Ensure appropriate logging and monitoring of all internal components that make up the High Speed Guard (HSG) and Trusted Gateway System (TGS). * Coordinate with system and network administrators to ensure logging and monitoring requirements are embedded in system deployments and configuration baselines. * Support RMF lifecycle activities within XACTA, including maintenance of control implementations and bodies of evidence. * Maintain SSP sections related to monitoring and audit architecture, and keep documentation current with system changes. * Validate STIG implementation (particularly OS and application STIGs) and audit configuration settings, and coordinate remediation for non-compliant findings. * Assist with development and maintenance of assessment and authorization documentation and other bodies of evidence., * The CDS ISSO will complete vendor-provided CDS solution training, and will attain and maintain CDS vendor-provided certification * The CDS ISSO will maintain DoW 8570.01M IAT Level III Certification. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)