Information System Security Officer

SOSi; Honolulu (HI); On-site; USD 110,000 - 160,000; Full time

Job summary

SOSi is seeking a seasoned Information Systems Security Officer (ISSO) to secure mission-critical IT operations at Joint Base Pearl Harbor Hickam, Honolulu. You will own the RMF lifecycle for a mission-ready environment supporting 5,000+ users across the Pacific theater.

The role requires DoD protocol fluency, strong communication with leadership, and hands-on experience implementing security controls, audits, and vulnerability management to sustain C2 capabilities.

Qualifications

• Identify vulnerabilities and manage RMF life cycle in a DoD environment.
• Experience with NIST 800-53, RMF, EO 14028, and M-22-09.
• Prior experience with eMASS and security authorization processes.
• Knowledge of STIGs, vulnerability management, and security auditing.

Responsibilities

• Assist ISSM in formulating and upholding information system security programs and policies.
• Establish and maintain secure systems for classified processing and perform security auditing.
• Develop and supervise guidelines for operational information systems security.
• Manage eMASS packages containing security authorizations.

Skills

RMF lifecycle

NIST 800-53

eMASS

STIG

Communication

Education

Bachelor's Degree in CS or related field

Tools

JIRA

Confluence

SCAP

Tenable Nessus

Job description

SOSi is looking for a seasoned Information Systems Security Officer (ISSO) ready to lead the charge in securing mission-critical IT operations at Joint Base Pearl Harbor Hickam, Honolulu. As part of a dynamic team supporting over 5,000 users across the Pacific theater, you’ll be at the forefront of solving complex technical challenges that drive real-time Command and Control (C2) strategies.

This isn’t just a job — it’s a mission. You’ll own the full Risk Management Framework (RMF) lifecycle, from identifying vulnerabilities to engineering resilient security controls. If you're fluent in DoD protocols, thrive in high-stakes environments, and can deliver executive-level insights with clarity and precision, this is your opportunity to make a strategic impact where it matters most.

• Assist the ISSM (Information System Security Manager) in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility.
• Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
• Develop and supervise the implementation of guidelines and policies for operational information systems security.
• Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.
• Coordinate inspections, tests, and reviews of information system security.
• As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team's success in responding to security incidents and protecting organizational assets.
• Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program.
• Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis.
• Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.
• Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner.
• Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Keep records of all security-related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO.
• Evaluate any changes to the system, its environment, and operational requirements that could impact security authorization.

Qualifications

• Compliant with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager. Bachelors Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering // OR // GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, or SSCP.
• Six (6) years of experience supporting cybersecurity, information assurance, systems engineering, or RMF-related activities.
• Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
• Prior experience with eMASS.
• Strong communication skills and ability to coordinate tasks across functional groups.

Preferred Qualifications:

• An Active in-scope TOP SECRET clearance with SCI Eligibility.
• Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
• Experience in an agile work environment
• Recent experience in the assessment and authorization of systems.
• Practical knowledge of JIRA and Confluence.
• Experience with compliance tools such as Tenable Nessus and SCAP.
• Experience in program policy and process creation and oversight.

Additional Information

• Working conditions are normal for an office environment.
• Fast paced, deadline-oriented environment.
• May require periods of non-traditional working hours including consecutive nights or weekends.

Working at SOSi:

All interested individuals will receive consideration and will not be discriminated against for any reason.