> Markdown version of [/jobs/ext/1975868-cyber-security-information-system-security-manager-issm-onsite](https://www.wearedevelopers.com/jobs/ext/1975868-cyber-security-information-system-security-manager-issm-onsite). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Information System Security Manager (ISSM) - Onsite

- **Company:** BAE Systems
- **Location:** Merrimack, NH, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cyber Security, Information Systems, Linux, Identity and Access Management, Information Security Management, Networking Hardware, Security Content Automation Protocol, Nessus, Vulnerability Analysis
- **Published:** August 7, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cyber-security-information-system-security-manager-issm-onsite-merrimack-nh-usa-58826542

## About the Role

and security activities with security architects, program personnel, and government reps * Conduct regular system assessments and vulnerability reviews to ensure compliance * Lead development and delivery of IA briefings and training material Tasks * Active Top Secret Clearance and IAM Level II per DoD 8570.1M * ISSM or relevant cybersecurity experience * Strong motivation, initiative, and adaptability to evolving security environments * Customer-focused, excellent communicator, and able to work with limited supervision * Strong organizational skills and collaboration with IA and other security disciplines * Experience with creating core documentation (SSP, SOPs, POA&Ms, Remediation Plans, CM plans) * Experience with vulnerability scanning tools (Nessus, SCAP, ACAS, SCC) and remediation reporting * Experience auditing and certifying compliance of Windows, Linux, network devices * Experience delivering IA-related briefings and training Key requirements * health, dental, and vision aaaaaaa

## Description

Experteer Overview In this Cybersecurity ISSM role, you will support a rigorous RMF-based program to protect critical information systems. You'll work within a cross-functional IA team to drive compliance, risk assessment, and continuous monitoring for classified environments. The position offers on-site collaboration and opportunities to advance national-security-focused cyber capabilities. You will contribute to shaping security documentation, audits, and incident analysis in a fast-paced, mission-driven setting. Compensation / Benefits * Support RMF compliance across assigned programs, aiming for Authority to Operate (ATO) approvals * Develop and manage System Security documentation, Plans of Actions and Milestones (POA&Ms) * Assess and audit security controls and perform continuous monitoring * Oversee compliance for all classified systems and maintain self-inspection program * Ensure up-to-date security certification and accreditation documents for classified systems * Coordinate security activities with security architects, program personnel, and government reps * Conduct regular system assessments and vulnerability reviews to ensure compliance * Lead development and delivery of IA briefings and training material Tasks * Active Top Secret Clearance and IAM Level II per DoD 8570.1M * ISSM or relevant cybersecurity experience * Strong motivation, initiative, and adaptability to evolving security environments * Customer-focused, excellent communicator, and able to work with limited supervision * Strong organizational skills and collaboration with IA and other security disciplines * Experience with creating core documentation (SSP, SOPs, POA&Ms, Remediation Plans, CM plans) * Experience with vulnerability scanning tools (Nessus, SCAP, ACAS, SCC) and remediation reporting * Experience auditing and certifying compliance of Windows, Linux, network devices * Experience delivering IA-related briefings and training Key requirements * health, dental, and vision insurance * health savings accounts * 401(k) savings plan * disability coverage * life and accident insurance * paid time off


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)