> Markdown version of [/jobs/ext/2278831-cloud-information-system-security-manager-issm](https://www.wearedevelopers.com/jobs/ext/2278831-cloud-information-system-security-manager-issm). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Information System Security Manager (ISSM) - **Company:** Applied Research Solutions - **Location:** Beavercreek Township, OH, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cloud Computing, Cyber Security, Continuous Integration, Information Security Management, Zero Trust Network Access, Systems Integration, Software Vulnerability Management, Information Technology, Devsecops, Security Orchestration, Automation & Response - **Published:** August 28, 2026 - **Apply:** https://recruiting.ultipro.com/APP1013ARSS/JobBoard/d7bd66ed-d867-48a4-879e-5b0f95b51ad5/OpportunityDetail?opportunityId=1c222c8e-b0e9-49bd-95ae-ed8cd01c5e2f ## About the Role * Must be a US citizen * Bachelor's degree in cybersecurity, computer science, engineering, or related field (or equivalent experience). * 5+ years of cybersecurity experience supporting DoD, federal, or regulated environments - eMASS experience is REQUIRED. * Detailed, hands-on experience with Azure security tools, including Microsoft Defender suite, Sentinel, Purview, and Azure Policy. * Strong knowledge of DevSecOps practices, CI/CD pipelines, and integrating security automation into development workflows. * Deep understanding of DoD RMF, NIST SP 800-53 Rev. 5 controls, and security assessment/evidence requirements. * Proficiency in vulnerability management tools, remediation processes, and risk-based prioritization. * Familiarity with threat intelligence platforms, adversary TTP analysis, and building threat-informed security detections. All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check. ## Description ARS is seeking a skilled Information System Security Manager to assist in the development and security hardening of a DevSecOps cloud environment to align with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) security requirements. The ISSM will assist with the cybersecurity governance and compliance efforts for a DoD DevSecOps environment operating on an Azure-based cloud backbone. This role is responsible for supporting the full lifecycle of Assessment and Authorization (A&A) activities, maintaining continuous Authority to Operate (ATO) compliance, and ensuring the accuracy, completeness, and integrity of all security artifacts within eMASS. They will develop, implement, and enforce cybersecurity policies, monitor control inheritance and system boundary changes, conduct risk assessments, and guide the engineering team in aligning system configurations with RMF controls, Zero Trust principles, and DoD Cloud SRG requirements. The successful candidate will provide strategic security leadership while ensuring that all technical decisions adhere to federal, DoD, and organizational security mandates. In addition to technical oversight, the ISSM will serve as the primary liaison to government stakeholders, authorizing officials, mission partners, auditors, and cross-functional engineering teams. This role requires exceptional communication, documentation, and soft skills to translate complex security requirements into actionable guidance, manage expectations, and foster productive relationships across diverse technical and non-technical audiences. The cybersecurity engineer will facilitate security briefings, coordinate remediation activities, lead collaboration with development and operations teams, and promote a strong security culture throughout the organization. The ideal candidate is a proactive, detail-oriented leader who brings both deep cybersecurity expertise and the interpersonal skills necessary to influence, educate, and drive secure outcomes in a dynamic DevSecOps environment., * Develop and implement information security policies and procedures * Conduct risk assessments and vulnerability testing * Monitor and respond to security incidents and threats * Ensure compliance with industry standards and regulations * Manage security audits and assessments * Develop and deliver security awareness training to employees * Stay up-to-date with the latest security trends and technologies. * Maintain working relationships with the ISO, AO, SCA, and other IS cybersecurity engineers. * Other duties as assigned ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)