Information Systems Security Officer

E&M Technologies, Inc.; Colorado Springs (CO); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) match

Flexible spending accounts

Flexible work schedules

Parental leave

Job summary

E&M Technologies, Inc. seeks an Information Systems Security Officer to safeguard mission-critical systems in Colorado Springs in support of NORAD. The role emphasizes RMF, A&A, and authorization activities for secure operating environments.

The ISSO will analyze threats, collaborate with government and vendors, and ensure compliance across RMF controls for Secret systems, while supporting continuous monitoring and risk mitigation efforts.

Qualifications

• Must have 5+ years of general work experience.
• Must have 5+ years of directly related experience.
• Experience applying RMF processes per NIST SP 800 series.
• Experience contributing to RMF Body of Evidence artifacts.
• Experience performing NIST SP 800-53 control assessments for Secret systems.
• Experience using DoD RMF tools like eMASS to document results and track deficiencies.
• Must meet DoDI 8140 requirements for ISSM role (722).
• Must be a U.S. Citizen.
• Must be able to maintain a DoD security clearance at the required level.

Responsibilities

• Play a key role in maintaining cybersecurity posture for mission-critical systems within the NISSC II portfolio.
• Maintain RMF compliance and support A&A efforts to keep Authorization to Operate active.
• Perform security analyses of threats and system environments, collaborating with government, suppliers, and internal teams to implement mitigations.

Skills

RMF processes

NIST SP 800-53

eMASS

DoD RMF tools

Security clearance

U.S. Citizenship

5+ years experience

ATOs/Assessment & Authorization

Tools

ACAS

Endpoint Security Solution (ESS)

SCAP tools

Job description

E&M Technologies, Inc. is dedicated to recruiting and developing diverse, high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers’ mission and quest for professional growth. E&M provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do.

Position: Information Systems Security Officer

Work Location: Colorado Springs, CO

Job Category: Information Technology

Job Type: Full Time

Requisition ID: EM09-199

Citizenship: United States Citizen

Clearance Type: Secret

Travel Requirements: Up to 10%

E&M Technologies, Inc. is currently seeking an Information Systems Security Officer to join our team in Colorado Springs, CO in support of the North American Aerospace Defense Command. NORAD is a United States and Canada bi‑national organization charged with the missions of aerospace warning, aerospace control and maritime warning for North America. Aerospace warning includes the detection, validation, and warning of attack against North America whether by aircraft, missiles, or space vehicles, through mutual support arrangements with other commands.

Job Description

• Play a key role in ensuring the cybersecurity posture of mission‑critical systems within the NISSC II portfolio.
• Have responsibility for maintaining compliance with Risk Management Framework (RMF) requirements and supporting Assessment and Authorization (A&A) efforts to ensure systems maintain an active Authorization to Operate (ATO).
• Perform security analyses of threats, vulnerabilities, and system environments while collaborating with government, supplier, and internal stakeholders to implement security measures that safeguard mission systems.

Requirements

Minimum Qualifications:

• Must have 5 or more years of general work experience
• Must have 5 years or more of directly related experience
• Experience applying Risk Management Framework (RMF) processes and principles in compliance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800 series.
• Experience in developing and/or contributing to the RMF Body of Evidence, including creation and maintenance of applicable artifacts and documentation for security control implementation and assessment.
• Experience performing NIST SP 800‑53 control assessments for Secret systems, including assessment of technical, operational, and management security controls.
• Experience utilizing Department of Defense RMF tools eMASS to document assessment results, track vulnerabilities, manage POA&Ms, and report compliance status.
• Must meet the requirements outlined in DoDM 8140 in the Information System Security Manager role (722)
• Must be a U.S. Citizen
• Must have and be capable of maintaining a U.S. Department of Defense (DOD) security clearance at the required level

Preferred Qualifications:

• Ability to perform continuous assessments of systems and network security measures to identify potential risks, vulnerabilities, and threats.
• Expertise in developing effective risk prevention strategies and mitigation plans to protect organizational assets.
• In-depth experience with the implementation of RMF processes in compliance with applicable DoD and industry cybersecurity policies and standards.
• Ability to interpret and apply cybersecurity policies to operational systems and provide informed recommendations.
• Proficient in utilizing security‑relevant tools such as Assured Compliance Assessment Solution (ACAS) and Endpoint Security Solution (ESS) to identify vulnerabilities, assess risks, and recommend actionable mitigations.
• Practical experience using Security Content Automation Protocol (SCAP) tools to analyze system configurations and check compliance with DoD Security Technical Implementation Guides (STIGs).
• Familiarity with best practices for secure system architectures, vulnerability management, and incident response.
• Ability to foster and promote a proactive cybersecurity culture within the organization through awareness and adherence to security principles.
• Strong interpersonal and communication skills, with the ability to collaborate effectively with cross‑functional teams, customers, and third‑party vendors.
• Ability to present complex cybersecurity concepts and issues in a clear, concise manner to both technical and non‑technical audiences.

Salary Description

Up to $120K USD

Hired applicants may be eligible for benefits, including but not limited to:

• medical
• dental
• vision
• life insurance
• short-term disability
• long-term disability
• 401(k) match
• flexible spending accounts
• flexible work schedules
• parental leave
• paid time off
• holidays

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

E&M anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require E&M to shorten or extend the application window.

E&M is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. E&M provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

As part of the federal government’s transition to the Trusted Workforce 2.0 Continuous Vetting framework, the Defense Counterintelligence and Security Agency (DCSA) is expanding enrollment in the FBI Rap Back program for cleared industry personnel beginning April 1, 2026.

Rap Back (Record of Arrest and Prosecution Back) is a service provided by the FBI that allows authorized agencies to receive notifications if there are updates to an individual’s criminal history record while they hold a security clearance. This supports continuous vetting of cleared personnel.

Per DCSA guidance, we are required to provide the following FBI privacy advisements to all cleared employees:

FBI Privacy Act Notice

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/privacy-act-statement

Noncriminal Justice Applicant’s Privacy Rights

https://www.fbi.gov/how-we-can-help-you/more-fbi-services-and-information/compact-council/guiding-principles-noncriminal-justice-applicants-privacy-rights