Information Systems Security Officer

SOSi; Hawaii; On-site; USD 120,000 - 160,000; Full time

Job summary

SOSI is seeking an experienced Information Systems Security Officer (ISSO) to lead RMF efforts at Joint Base Pearl Harbor Hickam, Honolulu. The candidate will oversee secure classified processing for 5,000+ users across the Pacific and drive C2 security strategies.

Required active SECRET clearance, RMF/NIST expertise, and strong communication. This role demands DoD protocol fluency, risk-based decisions, and executive-level reporting capabilities.

Qualifications

• Active SECRET clearance required.
• Six years of experience in cybersecurity, IA, systems engineering, or RMF.
• Thorough understanding of NIST 800-53r5, RMF, EO 14028, and M-22-09.
• Experience with eMASS.
• Strong communication and coordination across teams.

Responsibilities

• Assist the ISSM in formulating and upholding information system security programs and policies.
• Establish and maintain secure systems for classified processing; administer security audits.
• Develop and supervise security guidelines and policies for operational information systems.
• Manage eMASS packages containing security authorizations for systems.
• Coordinate inspections, tests, and reviews of information system security.
• Contribute expertise to security incident response and asset protection.
• Understand ACAS to support patch and vulnerability management."
• Review STIGs and ensure quarterly updates and compliance.
• Ensure Configuration Management policies for hardware/software authorization.
• Engage external stakeholders to coordinate interconnection requests efficiently.
• Maintain knowledge of system functions, security policies, and safeguards.
• Manage the information security continuous monitoring plan.
• Record vulnerabilities POA&Ms and report serious violations to AO/DAO.
• Evaluate changes to the system, environment, and operations.

Skills

Active SECRET clearance

RMF lifecycle

NIST 800-53r5

DoD protocols

Strong communication

Education

Bachelor's Degree in CS or Cybersecurity

Information Systems/IT or Software Engineering

Security certifications (CCISO/CCSP)

Tools

eMASS

ACAS

STIG

JIRA

Confluence

Tenable Nessus

SCAP

Job description

Company Description

Founded in 1989 and headquartered in Reston, Virginia, SOSi is a private defense and government solutions business specializing in advanced technology systems and mission support. Its capabilities include data science, software development, network engineering, intelligence, surveillance, and reconnaissance (ISR), and logistics.

Job Description

Join the Cyber Team in Paradise

SOSi is looking for a seasoned Information Systems Security Officer (ISSO) ready to lead the charge in securing mission-critical IT operations at Joint Base Pearl Harbor Hickam, Honolulu. As part of a dynamic team supporting over 5,000 users across the Pacific theater, you’ll be at the forefront of solving complex technical challenges that drive real-time Command and Control (C2) strategies.

This isn’t just a job — it’s a mission. You’ll own the full Risk Management Framework (RMF) lifecycle, from identifying vulnerabilities to engineering resilient security controls. If you're fluent in DoD protocols, thrive in high-stakes environments, and can deliver executive-level insights with clarity and precision, this is your opportunity to make a strategic impact where it matters most.

Essential Job Duties:

• Assist the ISSM (Information System Security Manager) in formulating and upholding an organized information system security program and policies that are applicable to their assigned area of responsibility.
• Establish and maintain secure computer systems and networks for classified processing, and take responsibility for the administration, maintenance, and security auditing of such systems.
• Develop and supervise the implementation of guidelines and policies for operational information systems security.
• Manage assigned eMASS (Enterprise Mission Assurance Support Service) packages containing all security authorizations for information systems under their supervision.
• Coordinate inspections, tests, and reviews of information system security.
• As a key member of the team, you will be responsible for contributing your expertise and skills to help ensure the team's success in responding to security incidents and protecting organizational assets.
• Practical understanding of the Assured Compliance Assessment Solution (ACAS) to support the execution of the information system patch and vulnerability management program.
• Thorough understanding of Security Technical Implementation Guidelines (STIG) and ensure they are reviewed, maintained, and updated on a quarterly basis.
• Ensure compliance with Configuration Management policies and procedures for authorizing the use of hardware and software on an information system.
• Engage with external stakeholders to facilitate the coordination of interconnection requests and ensure that such requests are processed and approved in an efficient manner.
• Maintain current knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Manage, maintain, and execute the information security continuous monitoring plan.
• Keep records of all security-related vulnerabilities POA&Ms and ensure that serious or unresolved violations are reported to the AO/DAO.
• Evaluate any changes to the system, its environment, and operational

Qualifications

Minimum Requirements:

• An Active in-scope SECRET clearance.
• Compliant with DoD 8140 DCWF 722 Intermediate, Information Systems Security Manager. Bachelor's Degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, ORSoftware Engineering // OR // GMON, SecurityX, CCISO, CCSP, CGRC, CISSO, Cloud+, GCSA, GSEC, Security+, OR SSCP.
• Six (6) years of experience supporting cybersecurity, information assurance, systems engineering, OR RMF-related activities.
• Thorough understanding of NIST Publication 800-53r5, Risk Management Framework, Executive Order 14028, and OMB Mandate M-22-09.
• Prior experience with eMASS.
• Strong communication skills and ability to coordinate tasks across functional groups.

Preferred Qualifications:

• An Active in-scope TOP SECRET clearance with SCI Eligibility.
• Knowledge of NSA’s Commercial Solution for Classified (CSfC) solution and Cross Domain Solutions (CDS).
• Experience in an agile work environment
• Recent experience in the assessment and authorization of systems.
• Practical knowledge of JIRA and Confluence.
• Experience with compliance tools such as Tenable Nessus and SCAP.
• Experience in program policy and process creation and oversight.

Additional Information

Work Environment:

• Working conditions are normal for an office environment.
• Fast paced, deadline-oriented environment.
• May require periods of non-traditional working hours including consecutive nights or weekends.

Working at SOSi:

All interested individuals will receive consideration and will not be discriminated against for any reason.