> Markdown version of [/jobs/ext/605335-information-system-security-specialist-isss-iii](https://www.wearedevelopers.com/jobs/ext/605335-information-system-security-specialist-isss-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Specialist (Isss) III

- **Company:** Watershed Security
- **Location:** Norfolk, VA, United States
- **Experience:** Expert
- **Salary:** $50,000.0 - $70,000.0
- **Contract:** Permanent contract
- **Skills:** Configuration Management, Cyber Security, Information Systems, Identity and Access Management, Information Security Management
- **Published:** June 23, 2026
- **Apply:** https://www.juju.com/job/00000000gago8i

## About the Role

+ Bachelor's degree in technical or managerial related discipline or High School Diploma or GED

 + Must have8570/8140 IAT III or IAM III certification

 + 5 years of relevant experience (Bachelors), 7 years of relevant experience (HS/GED)

 + Cybersecurity, Engineering, Test & Evaluation (T&E) or Assessment & Authorization (A&A)

 + Demonstrate a working knowledge: the Risk Management Framework (RMF) process; Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS)

 + DoD Top Secret Clearance

 + Work is onsite at Norfolk, VA

DESIRED QUALIFICATIONS

 + Individuals should have a deep understanding of Navy RMF (Navy RPG)

 + Strong communication, problem solving and customer engagement skills

 + Candidate shall be familiar with security policies & guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents purposed for compliance with Authority to Operate (ATO) requirements.

 + The specialist shall be capable of evaluating security solutions to ensure they meet security requirements for processing up to classified information and supervise and/or maintain the operational security posture for an information system or program. Individual shall have experience assisting or developing system security policy and ensuring compliance of change management and configuration control processes.

## Description

Watershed Security is looking for an RMF practitioner to join our growing team in Norfolk, VA. Be part of a multifaceted team providing RMF Support to the Naval Information Warfare Center Atlantic. The successful candidate will be responsible for creating and maintaining RMF Packages and achieving and maintaining ATOs.


## Related Videos

- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Giving AI eyes: How to build a dashboard you can't see](https://www.wearedevelopers.com/videos/100193-giving-ai-eyes-how-to-build-a-dashboard-you-can-t-see)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)