Alternate ISSM: DoD RMF & SIPRNet Security Lead

Applied-Research-Associates,-Inc; Raleigh (NC); On-site; USD 110,000 - 160,000; Full time

Job summary

Applied Research Associates, Inc. (ARA) seeks an early-career Information Systems Security Manager (ISSM) in Raleigh, NC.

The role focuses on day-to-day cybersecurity oversight for classified information systems, RMF/ATO maintenance, and eMASS administration to ensure secure, inspection-ready operations. You will coordinate with technical teams and Government stakeholders, maintain documentation, and support DoD cybersecurity reviews.

Qualifications

• Bachelor's degree or equivalent with 5-7 years of experience; Master’s degree with 3-5 years possible.
• 5+ years of supporting cybersecurity, IA, or related IT environments, including classified systems.
• 2+ years in ISSM, senior ISSO/IA, or cybersecurity leadership roles.
• Experience with DoD RMF and DCSA authorization processes; familiarity with DoD directives and NIST SP 800-53 Rev.4/5.
• Hands-on with eMASS or governance-risk-compliance platforms.
• Experience with vulnerability and configuration tools (ACAS/Tenable, SIEM, patches).
• Ability to meet DoD 8750/8140 workforce qualification requirements.
• Strong ability to communicate risk and status to technical staff and leadership.

Responsibilities

• Serve as an Alternate ISSM for assigned classified systems and maintain day-to-day cybersecurity compliance and risk visibility.
• Support RMF/ATO lifecycle activities including system categorization, control implementation, assessment, and continuous monitoring.
• Develop and maintain cybersecurity documentation: SSPs, Assessment Plans/Reports, POA&Ms, risk assessments, and RMF artifacts.
• Administer and quality-check eMASS records, controls, artifacts, assessments, and authorization documentation.
• Maintain assessment and inspection readiness; support DoD and customer reviews and corrective actions.
• Review system changes through configuration/change-control processes and update baselines, inventories, and RMF artifacts.
• Coordinate routine cybersecurity matters with technical teams; escalate significant risks to the Senior ISSM.
• Support development of DoD cybersecurity policies, templates, and documentation.
• Support incidents, urgent vulnerabilities, patching, outages affecting security controls.

Skills

Cybersecurity

RMF/ATO

eMASS

Vulnerability mgmt

Documentation

Education

Bachelor's degree

Master's degree

Tools

ACAS/Tenable

Splunk

eMASS

SCAP

Windows/Linux security baselines

Active Directory/Group Policy

Job description

Applied Research Associates, Inc. (ARA) seeks an early-career Information Systems Security Manager (ISSM) in Raleigh, NC.

The role focuses on day-to-day cybersecurity oversight for classified information systems, RMF/ATO maintenance, and eMASS administration to ensure secure, inspection-ready operations. You will coordinate with technical teams and Government stakeholders, maintain documentation, and support DoD cybersecurity reviews.