IS Security Manager - RMF/NIST Expert (Secret)

JANUS Research Group; Lexington (MA); Hybrid; USD 150,000 - 170,000; Full time

Benefits offered by this job

Health and welfare plans

Referral bonus program

Great Place to Work

Job summary

JANUS Research Group seeks an Information Systems Security Manager (ISSM) to oversee the security posture of JANUS corporate and CUI systems. You will manage RMF, NIST SP 800-53/171, and CMMC Level 2, while hands-on with Microsoft 365, AWS, and Linux security.

The hybrid role combines compliance oversight with system security and end-user training coordination, coordinating with DCSA, FSO, MSPs, and leadership to ensure ongoing compliance and secure operations.

Qualifications

• U.S. Citizenship and ability to obtain or maintain a DoD Security Clearance
• 3+ years of experience in IT systems, cybersecurity, or compliance support
• Knowledge of NIST SP 800-171, CMMC Level 2, and RMF standards
• Prior interaction with DCSA and knowledge of FSO/ISSM support requirements
• Microsoft 365 administration experience (Entra ID, Teams, SharePoint, Exchange)
• Security+ or equivalent IAM Level I certification (per DoD 8570)
• Excellent communication, documentation, and organizational skills

Responsibilities

• Maintain and update cybersecurity documentation, including SSPs, POA&Ms, policies, procedures, and user access records.
• Implement and monitor security controls for NIST SP 800-171, NIST SP 800-53, and CMMC Level 2. Run continuous monitoring, collect evidence, and report risk to leadership.
• Monitor and analyze Microsoft 365, including GCC High: Exchange Online, Teams, SharePoint, and Entra ID. Review Conditional Access, MFA, privileged roles, and Defender, Purview, and Intune findings.
• Lead preparation for CMMC assessments, DCSA reviews, and audits. Work with DCSA, the FSO, service providers, and leadership.
• Contribute to security audits, assessments, and continuous monitoring processes.
• Coordinate and deliver end‑user cybersecurity and IT training (e.g., phishing awareness, acceptable use).
• Support onboarding/offboarding and system access management.
• Assist with patch management, system hardening, and endpoint configurations.
• Own the secure development program. Run SAST, DAST, and dependency scanning tools in CI/CD pipelines, and triage findings with developers.
• Assess AWS security (commercial and GovCloud): IAM, Security Hub, GuardDuty, CloudTrail, and AWS Config. Confirm FedRAMP Moderate readiness before they hold CUI.
• Assess Windows and Active Directory security: STIG/CIS baselines, GPOs, privileged groups, tiered admin, service accounts, LAPS, BitLocker, application control, identity attack monitoring.
• Assess Linux security (RHEL): STIG/CIS hardening, FIPS, LUKS, logging, SCAP scans and remediation.

Skills

Clear communication

Organizational skills

Attention to detail

Citizenship & clearance readiness

Education

Security+ certification

Tools

Microsoft 365 administration

SAST/DAST tools

OWASP ZAP/Burp Suite

CI/CD security scanning

AWS security services

Job description

JANUS Research Group seeks an Information Systems Security Manager (ISSM) to oversee the security posture of JANUS corporate and CUI systems. You will manage RMF, NIST SP 800-53/171, and CMMC Level 2, while hands-on with Microsoft 365, AWS, and Linux security.

The hybrid role combines compliance oversight with system security and end-user training coordination, coordinating with DCSA, FSO, MSPs, and leadership to ensure ongoing compliance and secure operations.