1772 - Information System Security Officer

Sigma Defense; Moreno Valley (CA); On-site; USD 118,000 - 138,000; Full time

Benefits offered by this job

Dental & Vision Insurance

Medical Insurance (HSA/FSA/DFSA)

Life and AD&D

Employee Assistance Program

401(k) Plan with Company Matching

160 Hours PTO

12 Floating Holidays

Educational Assistance

Highly Competitive Salary

Job summary

Sigma Defense seeks an Information System Security Officer to strengthen RMF posture at March Air Reserve Base. You will manage RMF documentation, support A&A activities, and maintain cybersecurity artifacts across secure DoD environments.

Required 3-7 years of IA/Cyber Security or RMF experience, with Security+ and strong knowledge of NIST SP 800-53, STIGs, and vulnerability management. U.S. citizen status is mandatory.

Qualifications

• 3-7 years of relevant experience.
• Experience with RMF/A&A activities and documentation.
• Familiarity with CUI handling requirements and DoD environments.

Responsibilities

• Perform RMF activities and maintain RMF documentation.
• Coordinate A&A efforts and ensure security artifacts are up to date.
• Review DISA STIG compliance for Windows and Linux environments.
• Support vulnerability management, compliance, and incident response.

Skills

RMF experience

IA/Cyber Security

NIST SP 800-53 familiarity

STIGs familiarity

ACAS/ STIG Viewer / SCAP

CDS technologies

FMV systems

Vulnerability management

Incident response

US citizen

Education

Bachelor’s degree in Cybersecurity or related field

Tools

ACAS

STIG Viewer

SCAP Compliance Checker

Job description

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. This position plays a key role in maintaining the cybersecurity posture of secure Department of War information systems through Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, and system certification efforts. The ISSO is responsible for maintaining RMF documentation and cybersecurity artifacts while supporting Assessment and Authorization (A&A) activities and ensuring systems remain secure and compliant throughout their lifecycle.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

• 3-7 years of relevant experience.
• Information assurance IA/Cyber Security or Risk Management Framework (RMF) experience.
• Familiarity with NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
• Experience supporting vulnerability management and cybersecurity compliance activities.
• Experience supporting A&A activities.
• Experience maintaining RMF documentation and security artifacts.
• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.
• Understanding of Controlled Unclassified Information (CUI) requirements and handling procedures.
• Experience supporting secure or air-gapped Department of Defense environments.
• Experience supporting Cross Domain Solution (CDS) technologies.
• Experience with Full Motion Video (FMV) systems, platforms, or supporting infrastructure.
• Experience supporting vulnerability management, security compliance, or incident response activities.
• Experience working collaboratively with ISSMs, system administrators, and network engineers.
• Must be a U.S. citizen.

Mandatory Certifications:

• CompTIA Security+ is required.
• SSCP is preferred.
• CISSP is preferred.

Computer Programs/Software:

• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.

Personnel Clearance Level:

• Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher.
• Clearance may be sponsored for the right candidate.

Education Requirements:

• Bachelor’s degree from an accredited college or university in a Cybersecurity or related field of study.

Essential Job Duties (not all-inclusive):

• Perform routine vulnerability assessments using ACAS and coordinate remediation efforts with engineering staff.
• Review, document, and verify DISA STIG compliance for Windows, Red Hat Enterprise Linux, and supporting infrastructure.
• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).
• Support continuous monitoring activities and maintain the overall cybersecurity posture of assigned systems.
• Review system changes to identify cybersecurity impacts and ensure required documentation remains current.
• Coordinate with system administrators and network engineers to maintain secure and compliant system baselines.
• Support secure CDS operations and associated cybersecurity activities.
• Prepare and provide cybersecurity documentation, reports, and status updates for government stakeholders.
• Develop and maintain cybersecurity procedures, standard operating procedures, and supporting technical documentation.
• Assist with cybersecurity audits, inspections, and compliance reviews.

Salary Range: $118,000 - $138,000 annually.

• Dental and Vision Insurance
• Medical Insurance to Include HSA, FSA, and DFSA Plans
• Life and AD&D coverage
• Employee Assistance Program (EAP)
• 401(k) Plan with Company Matching Contributions
• 160 Hours of Paid Time Off (PTO)
• 12 (Floating) Holidays
• Educational Assistance
• Highly Competitive Salary