> Markdown version of [/jobs/ext/2008472-advisory-information-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/2008472-advisory-information-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Advisory Information Security Manager (ISSM)

- **Company:** Frontier Technology LLC
- **Location:** Huntsville, AL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Code Review, Cyber Security, Databases, Package Management Systems, Software Vulnerability Management, Nessus, Devsecops, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** August 9, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/advisory-information-security-manager-issm-huntsville-al-usa-58868907

## About the Role

annual reviews * Drive internal system hardening and DevSecOps practices across product lines * Perform architecture and code review oversight with SAST/DAST and SBOM considerations * Coordinate incident response, audit readiness, and inspections * Provide strategic security guidance to internal leadership and translate DoD/NIST requirements into actionable tasks * Interface with government officials to support accreditation and compliance processes Tasks * Active TS clearance (TS/SCI preferred) * DoD 8140/8570 baseline certification (Intermediate: Security+ / CASP+ / Cloud+ / GSEC or equivalent; Advanced preferred: CISSP/CISM) * 5+ years of RMF lifecycle experience supporting Army or Navy customers * Strong experience with eMASS and A&A package management * Hands-on vulnerability management and STIG/SRG application * Experience with DoD DoDI 8510.01, NIST SP 800-53 Rev.5, CNSSI 1253 * Shift-Left Security / DevSecOps experience * SAST/DAST and SBOM tooling familiarity * Strong aaa
packages management and on-site government collaboration Key requirements *

## Description

Experteer Overview In this role you lead RMF-based security for contractor networks and systems used in Army/Navy environments. You work on-site with government ISSMs and authorities to drive accreditation, ATOs, and continuous monitoring. You champion security-by-design and DevSecOps practices across company solutions before deployment. You collaborate with cross-functional teams to align security with mission requirements and government expectations. Your efforts help maintain authorization boundaries and strengthen system hardening at scale. Compensation / Benefits * Lead RMF lifecycle governance and ATO management for Army/Navy programs * Develop and maintain A&A packages in eMASS and relevant government databases * Evaluate security controls (NIST SP 800-53 Rev.5, CNSSI 1253) across architectures * Oversee vulnerability management with ACAS/Nessus and STIG/SRG application * Draft, track, and remediate POA&Ms with stakeholders * Establish and run Continuous Monitoring programs and annual reviews * Drive internal system hardening and DevSecOps practices across product lines * Perform architecture and code review oversight with SAST/DAST and SBOM considerations * Coordinate incident response, audit readiness, and inspections * Provide strategic security guidance to internal leadership and translate DoD/NIST requirements into actionable tasks * Interface with government officials to support accreditation and compliance processes Tasks * Active TS clearance (TS/SCI preferred) * DoD 8140/8570 baseline certification (Intermediate: Security+ / CASP+ / Cloud+ / GSEC or equivalent; Advanced preferred: CISSP/CISM) * 5+ years of RMF lifecycle experience supporting Army or Navy customers * Strong experience with eMASS and A&A package management * Hands-on vulnerability management and STIG/SRG application * Experience with DoD DoDI 8510.01, NIST SP 800-53 Rev.5, CNSSI 1253 * Shift-Left Security / DevSecOps experience * SAST/DAST and SBOM tooling familiarity * Strong stakeholder management and on-site government collaboration Key requirements *


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)