1772 - Information System Security Officer

Sigma-Defense; March Air Reserve Base (CA); On-site; USD 118,000 - 138,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance (HSA/FSA/DFSA)

Life and AD&D coverage

EAP 401(k) matching

PTO 160 hours

Holidays 12

Educational Assistance

Highly Competitive Salary

Job summary

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. The ISSO will manage RMF activities, continuous monitoring, and system certification to maintain compliant cybersecurity posture throughout the lifecycle.

Requirements include a Bachelor's in Cybersecurity or related field, 3–7 years of experience, and active TS/SCI eligibility. We value familiarity with ACAS, STIGs, and SCAP tools, plus strong coordination with ISSMs and engineers.

Qualifications

• 3-7 years of relevant experience in information security or RMF.
• Experience with RMF; familiarity with NIST SP 800-53 and STIGs.
• Experience supporting vulnerability management and A&A activities.
• Familiarity with ACAS, STIG Viewer, SCAP tools.
• Understanding CUI requirements and DoD environments.

Responsibilities

• Perform vulnerability assessments using ACAS and coordinate remediation.
• Review and verify DISA STIG compliance for Windows and RHEL environments.
• Develop and maintain POA&Ms and cybersecurity artifacts.
• Support continuous monitoring and security posture for assigned systems.
• Coordinate with sysadmins and network engineers to maintain baselines.

Skills

RMF experience

NIST SP 800-53 familiarity

A&A support

Vulnerability management

CDS technologies

CUI handling

TS/SCI clearance eligibility

Education

Bachelor's degree in Cybersecurity or related field

Tools

ACAS

STIG Viewer

SCAP Compliance Checker

Job description

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. This position plays a key role in maintaining the cybersecurity posture of secure Department of War information systems through Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, and system certification efforts. The ISSO is responsible for maintaining RMF documentation and cybersecurity artifacts while supporting Assessment and Authorization (A&A) activities and ensuring systems remain secure and compliant throughout their lifecycle.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

• 3-7 years of relevant experience.
• Information assurance IA/Cyber Security or Risk Management Framework (RMF) experience.
• Familiarity with NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
• Experience supporting vulnerability management and cybersecurity compliance activities.
• Experience supporting A&A activities.
• Experience maintaining RMF documentation and security artifacts.
• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.
• Understanding of Controlled Unclassified Information (CUI) requirements and handling procedures.
• Experience supporting secure or air-gapped Department of Defense environments.
• Experience supporting Cross Domain Solution (CDS) technologies.
• Experience with Full Motion Video (FMV) systems, platforms, or supporting infrastructure.
• Experience supporting vulnerability management, security compliance, or incident response activities.
• Experience working collaboratively with ISSMs, system administrators, and network engineers.
• Must be a U.S. citizen.

Mandatory Certifications:

• CompTIA Security+ is required.
• SSCP is preferred.
• CISSP is preferred.

Computer Programs/Software:

• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.

Personnel Clearance Level:

• Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher.
• Clearance may be sponsored for the right candidate.

Education Requirements:

• Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study.

Essential Job Duties (not all-inclusive):

• Perform routine vulnerability assessments using ACAS and coordinate remediation efforts with engineering staff.
• Review, document, and verify DISA STIG compliance for Windows, Red Hat Enterprise Linux, and supporting infrastructure.
• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).
• Support continuous monitoring activities and maintain the overall cybersecurity posture of assigned systems.
• Review system changes to identify cybersecurity impacts and ensure required documentation remains current.
• Coordinate with system administrators and network engineers to maintain secure and compliant system baselines.
• Support secure CDS operations and associated cybersecurity activities.
• Prepare and provide cybersecurity documentation, reports, and status updates for government stakeholders.
• Develop and maintain cybersecurity procedures, standard operating procedures, and supporting technical documentation.
• Assist with cybersecurity audits, inspections, and compliance reviews.

Salary Range: $118,000 - $138,000 annually.

• Dental and Vision Insurance
• Medical Insurance to Include HSA, FSA, and DFSA Plans
• Life and AD&D coverage
• Employee Assistance Program (EAP)401(k) Plan with Company Matching Contributions
• 160 Hours of Paid Time Off (PTO)
• 12 (Floating) Holidays
• Educational Assistance
• Highly Competitive Salary