Classified Security Programs Manager

Amazon Inc.; Arlington (VA); On-site; USD 102,000 - 178,000; Full time

Job summary

Amazon Leo Government (ALG) seeks an Information Systems Security Manager (ISSM) to scale and manage the ALG security program in Arlington, VA, in compliance with NISP, RMF, and DoD standards. You will own security policies, risk assessments, RMF accreditation, and continuous monitoring for classified systems.

This role requires U.S. citizenship and an active TS/SCI clearance. Some travel may be required while delivering secure, compliant solutions for government customers.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Systems Management, Information Security or related fields.
• 5+ years of experience with cybersecurity policies and RMF implementation, including DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series.
• Current certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM).

Responsibilities

• Own and enforce security policies, procedures, and regulatory requirements to ensure compliance with customer and NISP requirements; ensure users follow proper security procedures and all classified information systems are properly secured.
• Develop, implement, and maintain security policies, procedures, and documentation in compliance with DoD security standards and regulations (e.g., NIST, RMF, FISMA), raising the bar on quality and consistency.
• Create and maintain media sanitization (clearing, purging, or destroying) and reuse procedures, ensuring repeatable and auditable processes.
• Develop and document processes, procedures, and guidelines for protection requirements (e.g., e-mail labels, media labels), control procedures (e.g., discretionary access control, need-to-know sharing), incident management reporting, remote access requirements, system management, and use of encryption.
• Configure, update, and monitor classified network infrastructure devices including routers, firewalls, intrusion detection/prevention components, and switches; proactively identify and remediate vulnerabilities.
• Leverage customer-authorized tools to test and secure systems, including vulnerability scanners and antivirus solutions; document findings and drive remediation.
• Perform system administration functions for modern operating systems and applications, including installing and configuring operating systems, applying patches and updates, tuning security controls to meet federal requirements, monitoring operations, and managing system backups.
• Identify opportunities to automate, simplify, or improve security processes and mechanisms; document and share best practices across the team.

Skills

RMF implementation

Security policies

Risk management

NIST SP 800 series

Security auditing

Education

Bachelor's degree in CS/Engineering/Info Security

Job description

Amazon Leo Government (ALG) seeks an Information Systems Security Manager (ISSM) to scale and manage the ALG security program in Arlington, VA, in compliance with NISP, RMF, and DoD standards. You will own security policies, risk assessments, RMF accreditation, and continuous monitoring for classified systems.

This role requires U.S. citizenship and an active TS/SCI clearance. Some travel may be required while delivering secure, compliant solutions for government customers.