DoD Information Security Manager – RMF/ATO Expert

Leidos; Lorton (VA); On-site; USD 108,000 - 195,000; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos is seeking an Information System Security Manager (ISSM) for a DoD program in Virginia. You will oversee cybersecurity posture, develop and enforce RMF-based security controls, and manage continuous monitoring for DoD information systems.

This on-site role requires coordinating with ISSOs, engineers, and stakeholders to ensure compliance and timely accreditations. You will lead risk assessments, maintain SSPs and POA&Ms, and guide incident response while ensuring DoD regulatory alignment

Qualifications

• Subject matter expert on cybersecurity compliance / information assurance.
• Knowledge of DoD policies, frameworks, and compliance standards (NIST 800-53, RMF, FISMA).
• Experience with cloud computing and building/maintaining an ATO for cloud-based information systems.
• Experience with risk management, vulnerability assessments, and security audits.

Responsibilities

• Act as SME on cybersecurity compliance / information assurance.
• Collaborate with ISSOs and Cyber Security Engineers to execute continuous monitoring.
• Manage operational cybersecurity posture with NOC/SOC and Cloud Teams.
• Facilitate ATO/ATE/ATC/ISA processes with customers and stakeholders.

Skills

Cybersecurity compliance

DoD policy knowledge

Cloud security

Risk assessment

Vulnerability assessments

Security documentation

Cross-functional collaboration

Education

Bachelor’s Degree

Master’s degree

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

Leidos is seeking an Information System Security Manager (ISSM) for a DoD program in Virginia. You will oversee cybersecurity posture, develop and enforce RMF-based security controls, and manage continuous monitoring for DoD information systems.

This on-site role requires coordinating with ISSOs, engineers, and stakeholders to ensure compliance and timely accreditations. You will lead risk assessments, maintain SSPs and POA&Ms, and guide incident response while ensuring DoD regulatory alignment