Information Systems Security Manager (ISSM)

Socket.dev; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401k with match

Paid leave and holidays

Tuition reimbursement

Life and AD&D Insurance

Job summary

AnaVation is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity engineering, RMF execution, and continuous cybersecurity operations for DoD software factories and enterprise cloud environments.

The ISSM will serve as the cybersecurity lead across agile teams, integrating with government leadership and DevSecOps personnel to maintain secure cloud-native capabilities while accelerating software delivery through continuous authorization.

Qualifications

• Clearance: U.S. Citizen, TS/SCI with CI Poly within 5 years
• Bachelor’s degree in Cybersecurity, CS, Engineering or related field
• Experience with RMF, ATO, and continuous monitoring
• Experience briefing senior Government leadership
• Experience supporting DoD cybersecurity missions and enterprise cloud environments

Responsibilities

• Lead RMF implementation and initial ATOs and continuous ATO (cATO).
• Serve as cybersecurity lead for multiple mission value streams.
• Develop RMF artifacts: SSPs, SARs, POA&Ms.
• Coordinate assessments with officials and teams.
• Integrate cybersecurity into Agile/SAFe software development.
• Support Zero Trust, cloud security, Kubernetes/OpenShift, and DevSecOps pipelines.

Skills

Clearance

RMF experience

Agile/SAFe

Executive briefing

Education

Bachelor's degree

Tools

DoD policy knowledge

Job description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is seeking a highly motivated Information Systems SecurityManager (ISSM) who is responsible for cybersecurity engineering, cyber policy, and Risk Management Framework(RMF) activities supporting Department of Defense software factories and enterprise cloud environments. The ISSM willserve as the cybersecurity lead supporting one or more agile teams, integrating directly with Government leadership,Cyber Operations Teams (COT), Cyber Penetration Teams (CPT), Product Owners, Software Engineers, and DevSecOpspersonnel to maintain secure cloud-native capabilities while accelerating software delivery through Continuous Authorityto Operate (cATO).This position supports enterprise cybersecurity operations spanning multiple mission value streams and classifiedenvironments, ensuring secure software delivery while balancing mission execution, cybersecurity risk, and compliancewith Department of Defense policies. The position requires full-time support within classified environments in SanAntonio, Texas, with routine collaboration across mission engineering, cybersecurity, operations, and acquisitionorganizations.

Position Responsibilities:

The ISSM will provide technical leadership supporting cybersecurity engineering, RMFexecution, and continuous cybersecurity operations across software delivery environments.

Responsibilities include:

• Lead RMF implementation supporting initial ATOs and Continuous ATO (cATO).
• Serve as the cybersecurity lead supporting multiple mission value streams.
• Develop and maintain RMF authorization packages including SSPs, SARs, POA&Ms and supporting artifacts.
• Coordinate cybersecurity assessments with Authorizing Officials, Security Control Assessors, penetration testing teams, and engineering organizations.
• Integrate cybersecurity requirements into Agile and SAFe software development activities.
• Support planning, execution, remediation, and continuous monitoring.
• Ensure cybersecurity controls remain operational across development, testing, staging, and production environments.
• Coordinate vulnerability management, STIG implementation, POA&M tracking, and security control validation.
• Support Zero Trust implementation, cloud security, Kubernetes/OpenShift security, container hardening, and DevSecOps pipeline security.
• Evaluate cybersecurity risks and provide mitigation recommendations supporting mission operations.
• Support annual cyber assessments, inspections, and operational readiness activities.
• Develop executive-level briefings, risk assessments, and cybersecurity recommendations.
• Support operations across Unclassified, Secret, and SCI environments as required.

Required Qualifications:

• Clearance: U.S. Citizen, TS/SCI cleared within last 2 years; CI Polygraph within last 5 years
• Education:Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or relatedfield
• Certification: One or more of the following: CISSP, CASP+, Security+ or Equivalent DoD 8140 certification
• Location:Full-time on-site in San Antonio, TX.
• Experience and knowledge:
• Nine or more years supporting Department of Defense cybersecurity missions.
• Nine or more years serving as an ISSM, ISSE, or senior cybersecurity engineer.
• Experience implementing the Risk Management Framework (RMF).
• Experience achieving and maintaining Authority to Operate (ATO).
• Experience supporting Continuous Monitoring programs.
• Experience supporting DevSecOps environments.
• Experience supporting Agile or SAFe software development.
• Experience supporting enterprise cloud environments.
• Knowledge of NIST RMF, NIST 800-53, CNSSI guidance, DoD cybersecurity policy, and STIGimplementation.
• Experience briefing senior Government leadership.
• Excellent written and verbal communication skills.

Preferred Qualifications:

• Clearance: TS/SCI w/CI Poly
• Education: Advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or related field.
• Certification: One or more of the following: CISSP-ISSMP, AWS Security Specialty, Certified Cloud Security Professional (CCSP).
• Experience and Knowledge:
• Nine or more years supporting DoD cybersecurity missions.
• Experience supporting software factories.
• Experience supporting Kubernetes and OpenShift.
• Experience supporting Iron Bank or hardened container environments.
• Experience supporting Continuous ATO (cATO). - Experience implementing Zero Trust architectures.
• Experience supporting enterprise DevSecOps pipelines.
• Experience supporting IL4/IL5/IL6 cloud environments.
• Experience supporting software factories.
• Experience supporting Cyber Operations Teams.
• Experience supporting Cyber Penetration Teams.
• Experience supporting multiple military services and Combatant Commands.

Benefits

• Generous cost sharing for medical insurance for the employee and dependents
• 100% company paid dental insurance for employees and dependents
• 100% company paid long-term and short-term disability insurance
• 100% company paid vision insurance for employees and dependents
• 401k plan with generous match and 100% immediate vesting
• Competitive Pay
• Generous paid leave and holiday package
• Tuition and training reimbursement
• Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.