IT Security & Risk Analyst II

Oceaneering; Chesapeake (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health and Wellness

Retirement Savings

Paid Time Off

Tuition Reimbursement

Parental Leave

Job summary

Oceaneering is seeking an Information System Security Officer (ISSO) to oversee cybersecurity controls for classified systems under DCSA governance. The role involves ensuring compliance with RMF, NIST SP 800-53, and DAAPM, and supporting system accreditation throughout the lifecycle.

Responsibilities include developing SSPs and POA&Ms, conducting vulnerability assessments, and coordinating with system owners and security leadership.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field or equivalent experience.
• 3–5+ years of cybersecurity, information assurance, or classified system operations.
• Hands-on experience supporting DoD RMF, NIST SP 800-53 controls, and DAAPM compliance.
• Familiarity with DoD directives and federal cybersecurity regulations.

Responsibilities

• Manage cybersecurity compliance for classified systems per DoD RMF, NIST SP 800-53, DAAPM, and related directives.
• Develop and maintain SSPs, POA&Ms, Continuous Monitoring plans and other accreditation artifacts for DCSA.
• Conduct periodic security reviews, vulnerability scans, and assessments; track and remediate findings.
• Oversee configuration management, baseline controls, and secure configurations across environments.
• Coordinate with system owners, admins, PMs, and leadership to maintain security and support audits.
• Monitor and document security incidents; coordinate responses with teams and ensure escalation and documentation.
• Ensure proper account management, access reviews, least privilege, and need-to-know enforcement.
• Support DCSA inspections and assessments by preparing documentation and coordinating interviews.
• Provide security guidance for changes, upgrades, and new integrations, noting evolving DoD/DCSA requirements.

Skills

RMF compliance

NIST SP 800-53

DCSA DAAPM

DoD security regulations

Vulnerability assessment

SIEM monitoring

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ACAS

Nessus

SCCM

SIEM

Job description

Job Description

The Information System Security Officer (ISSO) is responsible for the implementation, management, and oversight of cybersecurity controls for classified information systems under Defense Counterintelligence and Security Agency (DCSA) governance. The ISSO ensures systems comply with federal and DoD cybersecurity requirements, supports system accreditation, and maintains the security posture of assigned environments throughout their lifecycle.

Responsibilities

Essential Functions

• Manage and maintain cybersecurity compliance for classified systems in accordance with DoD RMF, NIST SP 800-53, DCSA Assessment and Authorization Process Manual (DAAPM) (DAAG), and applicable DoD directives.
• Develop, update, and maintain System Security Plans (SSPs), POA&Ms, Continuous Monitoring plans, and other accreditation artifacts required by DCSA.
• Conduct periodic security reviews, vulnerability scans, and technical assessments; track and remediate identified findings.
• Oversee system configuration management, ensuring baseline controls, approved hardware/software listings, and secure configuration standards are enforced.
• Coordinate with System Owners, Administrators, Program Managers, and Security leadership to maintain system security, support audits, and implement required changes.
• Monitor, document, and report cybersecurity incidents; coordinate responses with security teams and ensure proper escalation and documentation.
• Ensure proper account management practices, including user provisioning, access reviews, and enforcement of least privilege and need-to-know.
• Support DCSA inspections, audits, and assessments by preparing documentation, coordinating interviews, and ensuring system readiness.
• Provide security guidance for changes, upgrades, new system integrations, and emerging risks affecting system security posture.
• Maintain awareness of evolving DoD/DCSA cybersecurity requirements and advise leadership on necessary updates to policies, controls, and procedures.

Qualifications

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
• 3-5+ years of experience in cybersecurity, information assurance, or classified system security operations.
• Hands-on experience supporting DoD RMF, NIST SP 800-53 security controls, and DCSA (DAAPM) compliance requirements.
• Working knowledge of classified information systems, enclave security, and federal cybersecurity regulations (e.g., DoDI 8500.01, DoDI 8510.01).
• Experience developing and maintaining accreditation artifacts such as System Security Plans (SSPs), POA&Ms, and Continuous Monitoring documentation.
• Ability to perform vulnerability scanning, configuration management, audit log review, and security assessments.
• Familiarity with tools such as ACAS, Nessus, SCCM, SIEM platforms, and other cybersecurity monitoring technologies.
• Active DoD security clearance (typically Secret; some roles require TS/SCI).
• IAM Level II certification required (e.g., CAP, CASP+, CISM, GSLC) in accordance with DoD 8140/8570.

Preferred Qualifications

• Experience supporting DCSA inspections, audits, and security reviews.
• Knowledge of classified system provisioning, account management, and secure enclave operations.
• Background with STIGs, HBSS/ESM, secure configuration baselines, patch management processes, and enclave/system hardening.
• Experience with incident response procedures for classified environments.
• Strong communication skills with the ability to brief leadership and collaborate with system owners, administrators, and security stakeholders.
• Familiarity with eMASS or similar compliance management platforms.
• Experience supporting system changes, upgrades, or new system integrations with RMF documentation updates.

Pay Transparency

We offer a comprehensive and competitive benefits package. Employee benefits vary by role, however, may include Health and Wellness, Mental Health, Retirement Savings, Life and Disability, Paid Maternity and Parental Leave, Paid Time Off, Tuition Reimbursement, and an Employee Assistance Program. Compensation: $90,000.00 - $120,000.00

About Us

Oceaneering is a global provider of engineered services and products, primarily to the offshore energy industry. We develop products and services for use throughout the lifecycle of an offshore oilfield, from drilling to decommissioning. We operate the world's premier fleet of work class ROVs. Additionally, we are a leader in offshore oilfield maintenance services, umbilicals, subsea hardware, and tooling. We also use applied technology expertise to serve the defense, material handling, aerospace, science, and renewable energy industries.

Equal Opportunity Employer

All qualified candidates will receive consideration for all positions without regard to race, color, age, religion, sex (including pregnancy), sexual orientation, gender identity, national origin, veteran status, disability, genetic information, or other non-merit factor.

About The Team

Oceaneering Marine Services Division (MSD) has over 30 years of experience providing full-service submarine and surface ship repairs supporting maintenance and alterations aboard commercial and U.S. military vessels. We are SUBSAFE and DDS-SOC certified and perform high-consequence maintenance on assets that operate in demanding environments.