ISSO - RMF & Cybersecurity Compliance Lead

Sigma-Defense; March Air Reserve Base (CA); On-site; USD 118,000 - 138,000; Full time

Benefits offered by this job

Dental and Vision Insurance

Medical Insurance (HSA/FSA/DFSA)

Life and AD&D coverage

EAP 401(k) matching

PTO 160 hours

Holidays 12

Educational Assistance

Highly Competitive Salary

Job summary

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. The ISSO will manage RMF activities, continuous monitoring, and system certification to maintain compliant cybersecurity posture throughout the lifecycle.

Requirements include a Bachelor's in Cybersecurity or related field, 3–7 years of experience, and active TS/SCI eligibility. We value familiarity with ACAS, STIGs, and SCAP tools, plus strong coordination with ISSMs and engineers.

Qualifications

• 3-7 years of relevant experience in information security or RMF.
• Experience with RMF; familiarity with NIST SP 800-53 and STIGs.
• Experience supporting vulnerability management and A&A activities.
• Familiarity with ACAS, STIG Viewer, SCAP tools.
• Understanding CUI requirements and DoD environments.

Responsibilities

• Perform vulnerability assessments using ACAS and coordinate remediation.
• Review and verify DISA STIG compliance for Windows and RHEL environments.
• Develop and maintain POA&Ms and cybersecurity artifacts.
• Support continuous monitoring and security posture for assigned systems.
• Coordinate with sysadmins and network engineers to maintain baselines.

Skills

RMF experience

NIST SP 800-53 familiarity

A&A support

Vulnerability management

CDS technologies

CUI handling

TS/SCI clearance eligibility

Education

Bachelor's degree in Cybersecurity or related field

Tools

ACAS

STIG Viewer

SCAP Compliance Checker

Job description

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. The ISSO will manage RMF activities, continuous monitoring, and system certification to maintain compliant cybersecurity posture throughout the lifecycle.

Requirements include a Bachelor's in Cybersecurity or related field, 3–7 years of experience, and active TS/SCI eligibility. We value familiarity with ACAS, STIGs, and SCAP tools, plus strong coordination with ISSMs and engineers.