Information System Security Manager (ISSM) & Cybersecurity Engineer

American Systems; McLean (VA); Hybrid; USD 100,000 - 150,000; Full time

Job summary

American Systems, McLean, VA, seeks a mid-level Information System Security Manager (ISSM) to support security operations in classified environments and contribute to the Cyber Operations team.

The role emphasizes hands-on ISSM work, RMF lifecycle management, and timely ATO decisions for classified systems, with collaboration across DCSA and system owners.

Qualifications

• Active Secret clearance required with ability to obtain Top Secret eligibility.
• 5+ years of cybersecurity, information assurance, or information security experience including support for classified information systems.
• 2+ years as an ISSM, ISSO, or equivalent cybersecurity role in RMF-authorized environments.
• Experience in cybersecurity operations.
• Experience obtaining, maintaining, and renewing ATO decisions for classified systems.

Responsibilities

• Serve as the primary cybersecurity lead for assigned information systems operating in classified environments.
• Oversee the implementation, compliance, and maintenance of system security requirements per policies.
• Lead the RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Manage activities required to obtain, maintain, and renew ATO decisions for classified systems.
• Develop, review, and maintain security authorization documentation (SSPs, assessments, POAMs, CM records).
• Coordinate with DCSA, Authorizing Officials, system owners, engineers, and assessors to support security authorization and ongoing compliance.
• Ensure security controls are implemented, operating as intended, and documented for classified information systems.

Skills

Active Secret clearance

RMF knowledge

DCSA coordination

Cybersecurity operations

Tools

NIST RMF

NIST SP 800-53

DAAPM

Job description

Overview

We are seeking amid-level Information System Security Manager (ISSM)to support security operations inclassified environmentswhile also serving in a secondary role within theCyber Operations team. This position is ideal for a security professional with hands-on ISSM experience, a strong understanding of theAuthorization to Operate (ATO)process andRisk Management Framework (RMF), and experience partnering withDCSAto authorize systems for classified use.

In addition to ISSM responsibilities, this role will support Cyber Operations activities focused onadministering, testing, validating, and maintaining enterprise security systems and controlsto strengthen the overall security posture of the environment.

Responsibilities

• Serve as the primary cybersecurity lead for assigned information systems operating in classified environments
• Oversee the implementation, compliance, and maintenance of system security requirements in accordance with government, customer, and organizational policies
• Lead the system through theRMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring
• Manage activities required to obtain, maintain, and renewAuthorization to Operate (ATO)decisions for classified systems
• Develop, review, and maintain security authorization documentation, including System Security Plans, security control assessments, POAMs, configuration management records, and related artifacts
• Coordinate withDCSA, Authorizing Officials, system owners, engineers, administrators, and assessors to support security authorization and ongoing compliance activities
• Ensure security controls are implemented, operating as intended, and documented appropriately for classified information systems

Qualifications

• Active Secret clearance required with the ability to obtain and maintain Top Secret eligibility REQUIRED.
• 5+ years of cybersecurity, information assurance, or information security experience, including experience supporting classified information systems
• 2+ years of experience serving as an ISSM, ISSO, or equivalent cybersecurity role supporting RMF-authorized environments.
• Experience in cybersecurity operations environment
• Experience obtaining, maintaining, and renewing Authorization to Operate (ATO) decisions for classified systems.

Working knowledge of:

• NIST Risk Management Framework (RMF)
• NIST SP 800-53 Security Controls
• DCSA Assessment and Authorization Process Manual (DAAPM)

Pay Transparency Statement

AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $100,000.00/Yr. - USD $150,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement

EEO Race/Sex/Disability Status/Veteran Status