DoD Cloud Security Officer: RMF, ATO & Threat Modeling

Actalent; Annapolis (MD); Hybrid; USD 120,000 - 154,000; Full time

Job summary

Actalent seeks an Information Systems Security Officer to lead cybersecurity for DoD software projects, focusing on RMF compliance and secure AWS workloads. You will manage security packages, ATO processes, and collaboration across engineering, cybersecurity, business, and customers.

The role requires DoD RMF expertise, hands-on use of eMASS/STIG tools, and experience delivering secure container-based solutions in a cloud environment. A strong communication and leadership track is essential.

Qualifications

• At least 5 years as an ISSE supporting DoD software projects.
• Experience generating and submitting SSPs, POA&Ms, and artifacts for RMF/STIG processes.
• Hands-on experience using DoD tools (eMASS, STIG Viewer) to develop and manage security packages and achieve DoD ATO.

Responsibilities

• Serve as an ISSE for DoD software projects, providing cybersecurity leadership across the lifecycle.
• Generate and submit SSPs, POA&Ms, and other artifacts to support RMF and STIG processes.
• Apply DoD cybersecurity tools (eMASS, STIG Viewer) to build, manage, and validate security packages.
• Obtain and maintain DoD ATO for AWS-deployed container workloads.
• Inform software mitigation requirements based on SAST (SonarQube) results and container scanning (Trivy).
• Recommend data protection mechanisms and test security controls to reduce risk.
• Lead vulnerability management and coordinate remediation across teams.
• Monitor security posture and respond to anomalous activity in deployed workloads.

Skills

RMF compliance

SSP/POA&Ms

eMASS

STIG Viewer

ATO for AWS

SAST analysis

Container security

Data protection

Threat modeling

Vulnerability management

DevSecOps guidance

Security certifications

RMF lifecycle collaboration

Education

CISSP / CASP / Security+ certification

Tools

Splunk

CloudWatch

Wiz

eMASSter

GuardDuty

Security Hub

Trivy

Job description

Actalent seeks an Information Systems Security Officer to lead cybersecurity for DoD software projects, focusing on RMF compliance and secure AWS workloads. You will manage security packages, ATO processes, and collaboration across engineering, cybersecurity, business, and customers.

The role requires DoD RMF expertise, hands-on use of eMASS/STIG tools, and experience delivering secure container-based solutions in a cloud environment. A strong communication and leadership track is essential.