Information Security Manager — RMF & Incident Response Lead

Socket.dev; Arlington (VA); On-site; USD 60,000 - 90,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Health Savings Account

401K Matching

Paid Holidays

Paid PTO/Sick

Online Training

Job summary

Socket.dev is seeking an Information Systems Security Specialist to support critical customer missions in Arlington, VA. Active TS/SCI clearance and DoD-style RMF experience are required for this role.

Responsibilities include managing RMF lifecycle, coordinating with ISSM/CISO, and implementing security controls across lab systems and networks, with a strong emphasis on risk assessment and program delivery.

Qualifications

• Active TS/SCI clearance required.
• 5+ years of directly relevant information security management experience.
• Hands-on Linux or AWS experience and RMF/ ATO familiarity.
• Experience with RMF documentation, SSPs, and POAM management.
• U.S. Citizenship and ability to obtain DHS suitability.

Responsibilities

• Manage the full RMF lifecycle for IT systems as part of a security team.
• Assist leadership on major tasks and technology assignments.
• Lead goals and plans to meet project objectives.
• Collaborate with ISSM and CISO to respond to Data Calls and ATO requirements.
• Plan, coordinate, and implement cybersecurity for lab systems and programs.
• Develop and implement security controls for hardware, software, and networks.
• Interface with senior management during client negotiations and reviews.

Skills

RMF knowledge

CND policies

Linux / AWS

POAM management

Threat analysis

Team collaboration

Education

BS Information Management

Cybersecurity

Computer Science

HS Diploma + 7+ yrs exp

Tools

Nessus

Splunk

CrowdStrike/CarbonBlack

Nmap

AWS CLI

Job description

Socket.dev is seeking an Information Systems Security Specialist to support critical customer missions in Arlington, VA. Active TS/SCI clearance and DoD-style RMF experience are required for this role.

Responsibilities include managing RMF lifecycle, coordinating with ISSM/CISO, and implementing security controls across lab systems and networks, with a strong emphasis on risk assessment and program delivery.