> Markdown version of [/jobs/ext/1508654-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/1508654-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer - **Company:** McLaughlin Research Corporation - **Location:** Newport, RI, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Xacta, Microsoft Windows, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Linux, Information Security Management, Software Vulnerability Management, Cloud Platform System, Navsea, Information Technology, Nessus, Plan of Action and Milestones - **Published:** July 30, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9067766/information-systems-security-officer ## About the Role Active Secret Security Clearance Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience) 5+ years supporting DoD cybersecurity programs Demonstrated experience implementing the DoD Risk Management Framework (RMF) Extensive experience with Navy Authorization to Operate (ATO) processes Strong working knowledge of: NIST SP 800-53 DoD RMF Security Controls Assessment process POA&M management Continuous Monitoring Experience using eMASS Active DoD CAC (preferred) or ability to obtain eMASS access Experience implementing and remediating Security Technical Implementation Guides (STIGs) Familiarity with Microsoft Azure Government and/or AWS GovCloud Understanding of FedRAMP security requirements and cloud compliance Working knowledge of the DoD Cloud Computing Security Requirements Guide (Cloud SRG) Excellent communication and documentation skills Highly Desired Qualifications: Extensive experience obtaining Navy ATOs Existing relationships within Navy cybersecurity organizations Current Navy CAC with Flank Speed access Ability to access SIPRNet on a regular basis Experience supporting Secret or higher classified information systems Xacta experience TS/SCI Security Clearance CISSP, CAP, Security+, CASP+, or equivalent DoD 8570/8140 certifications, Navy or NAVSEA cybersecurity programs DoD Cloud environments Microsoft Azure Government AWS GovCloud FedRAMP Moderate/High environments Continuous Authorization (cATO) DISA STIG automation Vulnerability management platforms (ACAS, Tenable, Nessus) Enterprise Identity and Access Management Secure cloud architecture ## Description We are seeking an experienced Information Systems Security Officer (ISSO) to support cybersecurity compliance and accreditation activities supporting a Department of Defense (DoD) cloud environment. The ideal candidate will possess extensive experience navigating the Navy Authorization to Operate (ATO) process and will serve as a cybersecurity resource responsible for guiding the system through the DoD Risk Management Framework (RMF) lifecycle. This position will work closely with government stakeholders, engineering teams, cloud architects, and program leadership to achieve and maintain authorization while ensuring compliance with DoD cybersecurity requirements. Primary Responsibilities: Lead cybersecurity activities throughout the DoD Risk Management Framework (RMF) lifecycle. Manage the development, review, and maintenance of RMF artifacts and authorization documentation. Serve as the primary ISSO supporting the achievement of a Navy Authorization to Operate (ATO). Coordinate directly with government Authorizing Officials (AO), Information System Security Managers (ISSM), validators, and cybersecurity representatives. Build and maintain effective working relationships with Navy cybersecurity organizations to facilitate the authorization process. Utilize eMASS to manage security controls, documentation, findings, and authorization packages. Coordinate Security Technical Implementation Guide (STIG) implementation and validation across Windows, Linux, networking, and cloud environments. Conduct security control assessments against NIST SP 800-53 requirements. Support vulnerability management, POA&M development, and continuous monitoring activities. Collaborate with engineering teams to implement secure cloud architectures within Azure Government and/or AWS GovCloud. Assist with DoD Cloud Security Requirements Guide (SRG) compliance activities. Support future Secret-level accreditation efforts and classified system expansion. Provide cybersecurity guidance throughout system design, implementation, and operational phases. Develop executive-level status reports and communicate cybersecurity risks to technical and non-technical stakeholders. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) - [Discover the open source trio you didn’t expect: .NET and PostgreSQL on Linux](https://www.wearedevelopers.com/videos/2042-discover-the-open-source-trio-you-didn-t-expect-net-and-postgresql-on-linux) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)