Cloud Security ISSO — DoD RMF & Cloud Compliance

Bowhead; Arlington (VA); On-site; USD 160,000 - 180,000; Full time

Job summary

Bowhead seeks an Information Systems Security Officer (ISSO Cloud) to support the Nautical contract in Arlington, VA. The role focuses on securing cloud migrations, managing RMF activities, and sustaining continuous monitoring in DoD environments.

Candidates should have extensive DoD security experience, strong knowledge of NISPOM/ICD, and hands-on cloud security expertise. The position requires US citizenship and access to security clearances.

Qualifications

• Bachelor's degree or 10 years experience in lieu of degree.
• 16+ years of information security with cloud security.
• 5+ years of DoD security in enterprise environments.
• 3+ years hands-on with cloud security frameworks.
• NISPOM/ICD requirements understood and implemented.

Responsibilities

• Implement and maintain security controls per NIST 800-53 and DoD standards for cloud-based systems.
• Conduct comprehensive security assessments and vulnerability analyses on cloud infrastructure.
• Coordinate RMF processes with Authorizing Officials and maintain continuous monitoring.
• Monitor incidents and coordinate response across cloud environments.
• Maintain security awareness training and ensure DoD requirements compliance.
• Perform cloud security assessments and penetration testing.

Skills

Cloud security

Information security

Security governance RMF

Strong communication

Vulnerability management

NISPOM/ICD knowledge

Education

Bachelor's degree in Cybersecurity/IS/IT

10 years experience in lieu of degree

Tools

ACAS

HBSS/Trellix ESS

Active Directory/LDAP

Job description

Bowhead seeks an Information Systems Security Officer (ISSO Cloud) to support the Nautical contract in Arlington, VA. The role focuses on securing cloud migrations, managing RMF activities, and sustaining continuous monitoring in DoD environments.

Candidates should have extensive DoD security experience, strong knowledge of NISPOM/ICD, and hands-on cloud security expertise. The position requires US citizenship and access to security clearances.