> Markdown version of [/jobs/ext/1683591-information-systems-security-officer](https://www.wearedevelopers.com/jobs/ext/1683591-information-systems-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Officer - **Company:** McLaughlin Research Corporation - **Location:** Middletown, RI, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Xacta, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Information Technology, Plan of Action and Milestones - **Published:** July 31, 2026 - **Apply:** https://mrcds.hua.hrsmart.com/hr/ats/Posting/view/706 ## About the Role * Active Secret Security Clearance * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related discipline (or equivalent experience) * 5+ years supporting DoD cybersecurity programs * Demonstrated experience implementing the DoD Risk Management Framework (RMF) * Extensive experience with Navy Authorization to Operate (ATO) processes * Strong working knowledge of: + NIST SP 800-53 + DoD RMF + Security Controls Assessment process + POA&M management + Continuous Monitoring * Experience using eMASS * Active DoD CAC (preferred) or ability to obtain eMASS access * Experience implementing and remediating Security Technical Implementation Guides (STIGs) * Familiarity with Microsoft Azure Government and/or AWS GovCloud * Understanding of FedRAMP security requirements and cloud compliance * Working knowledge of the DoD Cloud Computing Security Requirements Guide (Cloud SRG) * Excellent communication and documentation skills Highly Desired Qualifications: * Extensive experience obtaining Navy ATOs * Existing relationships within Navy cybersecurity organizations * Current Navy CAC with Flank Speed access * Ability to access SIPRNet on a regular basis * Experience supporting Secret or higher classified information systems * Xacta experience * TS/SCI Security Clearance * CISSP, CAP, Security+, CASP+, or equivalent DoD 8570/8140 certifications ## Description We are seeking an experienced Information Systems Security Officer (ISSO) to support cybersecurity compliance and accreditation activities supporting a Department of Defense (DoD) cloud environment. The ideal candidate will possess extensive experience navigating the Navy Authorization to Operate (ATO) process and will serve as a cybersecurity resource responsible for guiding the system through the DoD Risk Management Framework (RMF) lifecycle. This position will work closely with government stakeholders, engineering teams, cloud architects, and program leadership to achieve and maintain authorization while ensuring compliance with DoD cybersecurity requirements., * Lead cybersecurity activities throughout the DoD Risk Management Framework (RMF) lifecycle. * Manage the development, review, and maintenance of RMF artifacts and authorization documentation. * Serve as the primary ISSO supporting the achievement of a Navy Authorization to Operate (ATO). * Coordinate directly with government Authorizing Officials (AO), Information System Security Managers (ISSM), validators, and cybersecurity representatives. * Build and maintain effective working relationships with Navy cybersecurity organizations to facilitate the authorization process. * Utilize eMASS to manage security controls, documentation, findings, and authorization packages. * Coordinate Security Technical Implementation Guide (STIG) implementation and validation across Windows, Linux, networking, and cloud environments. * Conduct security control assessments against NIST SP 800-53 requirements. * Support vulnerability management, POA&M development, and continuous monitoring activities. * Collaborate with engineering teams to implement secure cloud architectures within Azure Government and/or AWS GovCloud. * Assist with DoD Cloud Security Requirements Guide (SRG) compliance activities. * Support future Secret-level accreditation efforts and classified system expansion. * Provide cybersecurity guidance throughout system design, implementation, and operational phases. * Develop executive-level status reports and communicate cybersecurity risks to technical and non-technical stakeholders. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)