DoW Information Systems Security Manager ISSM - Navy - Tetrad Digital Integrity LLC

OpenTalent; Virginia (MN); On-site; USD 140,000 - 200,000; Full time

Job summary

TDI is seeking an experienced cybersecurity professional to lead RMF activities and coordinate security across DoW systems. The role focuses on cloud-native workloads, DoD RMF, NIST 800-53 controls, and AI security considerations, with minimal travel and a requirement for active clearance.

The candidate will collaborate with system architects, DevSecOps, and developers to ensure secure SDLC integration, develop SSPs/SARs/POA&Ms, and maintain compliance posture across environments.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology.
• 8+ years in cybersecurity with RMF support for DoD/DoW systems.
• Active Secret or Top-Secret clearance required.
• CISSP and/or CISM certifications are preferred.

Responsibilities

• Lead and support RMF execution and customer coordination in an IL 6 environment.
• Provide expert guidance on NIST SP 800-53 controls and DoW frameworks.
• Conduct security architecture reviews for cloud-native and containerized workloads.
• Evaluate security controls in Kubernetes, Docker, and cloud platforms.
• Develop SSPs, SARs, POA&Ms, and related RMF documents.
• Perform threat modeling, vulnerability assessments, and risk analysis for cloud/AI ecosystems.
• Interface with architects, developers, and DevSecOps to embed security in SDLC.
• Monitor and report security compliance through Continuous Monitoring.

Skills

RMF execution

NIST SP 800-53

Cloud security

Kubernetes

Docker

Security architecture reviews

Threat modeling

Vulnerability assessments

SDLC security

ConMon

DoD RMF

Generative AI security

Security clearance knowledge

Education

Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology

Tools

AWS

Azure

GCP

IAM

VPC

Job description

• Lead and support RMF execution and customer coordination in an IL 6 environment
• Provide expert guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, and DoW-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
• Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads.
• Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms within cloud infrastructure.
• Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
• Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
• Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
• Support security control assessments (SCAs) and coordinate with third-party assessors.
• Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.
• Minimal travel will be required.
• Active Secret or Top-secret security clearance.
• Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology, and 8+ years of cybersecurity experience, including demonstrated experience supporting Risk Management Framework (RMF) activities for Department of War (DoW) systems.
• Security certifications such as Certified Information System Security Professional (CISSP) and/or Certified Information System Manager (CISM).
• Practical knowledge and application of concepts with cloud platforms. Experience with AWS, Azure and/or Google Cloud Platform (GCP), including IAM, VPC, Kubernetes, and security-related services are preferable.
• Strong knowledge of containerized environments (e.g., Docker, Kubernetes) and container security best practices.
• Familiarity with Generative AI technologies, including LLMs and AI/ML security considerations.
• Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and other relevant cybersecurity frameworks.
• Experience with security risk assessments in DoW environments.

TDI does business with the federal government, which restricts employment to individuals who are either US citizens or lawful permanent residents of the United States.

“TDI is an Equal Opportunity Employer. Employment decisions are made based on individual qualifications, merit, and business needs. We do not discriminate in employment opportunities or practices based on race, color, religion, sex, or national origin, in accordance with applicable federal laws.”

lQFL2RTyVG