> Markdown version of [/jobs/ext/3998139-information-system-security-officer](https://www.wearedevelopers.com/jobs/ext/3998139-information-system-security-officer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Officer

- **Company:** Kapili Services, LLC
- **Location:** Honolulu, HI, United States
- **Experience:** Experienced
- **Salary:** $140,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Amazon Web Services, JIRA, Microsoft Azure, Cloud Computing, Configuration Management, CompTIA Security+, Cyber Security, Information Systems, Linux, Identity and Access Management, Information Security Management, Windows Servers, Security Content Automation Protocol, Security Information and Event Management, Information Technology, Nessus, Splunk, Devsecops, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 28, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88735587/1

## About the Role

* Bachelor's Degree - Accredited B.S. in Cybersecurity, Information Systems, Computer Science, or related field
 * DoD 8140 / 8570.01-M IAM Level II or III = CompTIA Security+, Cloud+, CAP, Security X/CASP+, CCISO, CCSP, CISSO, GCSA, GSEC, SSCP, CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC.
 * Federal / DoD Frameworks - Demonstrated coursework or training in NIST SP 800-37, NIST SP 800-53 Rev 5, CNSSI 1253, and eMASS / Xacta administration., * Four plus (4+) years of direct experience executing Assessment & Authorization (A&A) workflows to achieve Authority to Operate (ATO). Experience supporting Authorization to Connect (ATC) and cross-domain solution validations.
 * Hands-on experience interpreting DISA STIGs, Security Content Automation Protocol (SCAP), and ACAS vulnerability scans. Experience validating host-level security baselines across Linux, Windows Server, and cloud enclaves (AWS / Azure GovCloud).
 * Direct proficiency using governance tools such as eMASS, Xacta, Archer, or Jira for tracking compliance workflows. Experience establishing continuous monitoring strategies using SIEM tools such as Splunk or Elastic Security.
 * Demonstrated ability to present complex risk metrics and technical deficiencies to executive leadership and Authorizing Officials (AO). Familiarity with Supply Chain Risk Management (SCRM) and DevSecOps continuous ATO paradigms.

On-site work within a secure facility (SCIF) with occasional travel for site compliance audits.

REQUIRED CITIZENSHIP AND CLEARANCE:

 * Must be a U.S. Citizen
 * Active Top Secret clearance with immediate eligibility for Sensitive Compartmented Information (TS/SCI)., Delivering high quality, customer-focused products and services through Mission-Synchronized Solutions

## Description

Bering-Alaka'ina Associates LLC is looking for an experienced and detail-oriented Information System Security Officer (ISSO) to enhance the cybersecurity posture, assessment, and authorization lifecycle for mission-critical information systems to provide support for our government customer in Oahu, Hawai'i., * Oversee the end-to-end Risk Management Framework (RMF) lifecycle (Steps 1 through 6), ensuring system artifacts and security controls are thoroughly documented and up to date in eMASS or Xacta.

 * Validate implementation of NIST SP 800-53 security controls, identify control deficiencies, and formulate achievable remediation strategies.
 * Review and analyze automated vulnerability and compliance scans (ACAS/Nessus, SCAP, STIG viewer), correlating findings and verifying mitigation efficacy.
 * Develop, track, and maintain comprehensive Plan of Action and Milestones (POA&M) entries to ensure rapid closure of system vulnerabilities and audit findings.
 * Author, update, and maintain System Security Plans (SSP), Contingency Plans, Incident Response Plans, Continuous Monitoring Plans, and Configuration Management Plans.
 * Participate in Change Control Boards (CCB) to evaluate security impacts of proposed architectural, software, and hardware modifications.
 * Assist with cybersecurity event investigations, incident triage, and continuous audit log reviews to ensure integrity across system environments.
 * Other duties as assigned by Supervisor.