ISSM
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
Job description
Zachary Piper Solutions is seeking a Information System Security Manager (ISSM) to support a company focused on secure cloud-based autonomy and artificial intelligence programs within the defense sector. This position is onsite in Arlington, VA offices. The ISSM will provide hands-on security leadership supporting DevSecOps pipelines and DoD authorization efforts for advanced AI, automation, and autonomous systems. This role directly enables mission-critical AI capabilities to securely transition into operational DoD environments. Responsibilities for the Information System Security Manager (ISSM) include:
- Lead and execute RMF and ATO processes for cloud-based AI and autonomy systems entering DoD environments
- Provide hands-on security support within AWS-based DevSecOps pipelines, ensuring compliance with DoD security requirements
- Work directly with engineering teams, AWS partners, and external vendors to guide systems through authorization
- Perform vulnerability management, mitigation, and continuous monitoring activities using eMASS and related tools
- Translate government security requirements into actionable guidance for commercial and technical stakeholders
Requirements
- 10+ years of experience in information assurance, cybersecurity, or system security engineering roles
- Strong experience with RMF, ATO processes, GRC, eMASS, and DevSecOps in cloud environments
- Bachelor’s degree in Cybersecurity, Information Systems, Engineering, or equivalent professional experience
- IAT/IAM certification
- Active or TS/SCI clearance required
Benefits & conditions
- Salary Range: $140,000-165,000 depending on experience
- Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on careerjet.comGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.
Understanding and Mitigating Common Web Vulnerabilities
The Overflow: Security and Privacy
Walking Into The Era of Supply Chain Risks