DoD DevSecOps Cloud Security Manager

Applied Research Solutions; Beavercreek Township (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

Applied Research Solutions seeks an Information System Security Manager to shape a DevSecOps cloud security program aligned with DoD RMF and CMMC 2.0 requirements. The role focuses on A&A lifecycle, continuous ATO for an Azure-based environment, and ensuring integrity of security artifacts in eMASS.

The ISSM will lead governance, liaise with government stakeholders, manage security briefs, and drive secure outcomes while mentoring engineering teams and promoting a security-first culture.

Qualifications

• 5+ years of cybersecurity experience in DoD, federal, or regulated environments.
• DoD RMF, NIST SP 800-53 Rev. 5 controls knowledge required.
• eMASS experience REQUIRED.
• Strong knowledge of DevSecOps practices and security automation.

Responsibilities

• Develop and implement information security policies and procedures.
• Conduct risk assessments and vulnerability testing.
• Monitor and respond to security incidents and threats.
• Ensure compliance with industry standards and regulations.
• Manage security audits and assessments.
• Deliver security awareness training to employees.
• Maintain relationships with ISO, AO, SCA, and other IS cybersecurity engineers.

Skills

DevSecOps

RMF/NIST controls

Threat intelligence

Vulnerability management

Education

Bachelor's degree in cybersecurity, computer science, engineering, or related field

Tools

Microsoft Defender

Azure Sentinel

Azure Purview

Azure Policy

Job description

Applied Research Solutions seeks an Information System Security Manager to shape a DevSecOps cloud security program aligned with DoD RMF and CMMC 2.0 requirements. The role focuses on A&A lifecycle, continuous ATO for an Azure-based environment, and ensuring integrity of security artifacts in eMASS.

The ISSM will lead governance, liaise with government stakeholders, manage security briefs, and drive secure outcomes while mentoring engineering teams and promoting a security-first culture.