Senior Defense ISSO/ISSM with Cloud experience

TDI (Tetrad Digital Integrity); United States; On-site; USD 120,000 - 140,000; Full time

Job summary

A leading defense security firm in the United States is seeking a Senior Defense ISSO/ISSM with Cloud experience to lead RMF for cloud-hosted systems. This position involves guiding engineers in security processes, automating compliance tasks, and ensuring robust security implementation. The ideal candidate has over 10 years of cybersecurity experience, advanced certifications, and a proactive approach to security challenges. Join us to make a difference in maintaining defense sector integrity.

Qualifications

• U.S. Citizenship and active DOD Secret clearance (Top Secret preferred).
• 10+ years of experience supporting DOD RMF for information systems.
• Advanced certifications such as CISSP, CCSP, or relevant cloud security certifications.

Responsibilities

• Own RMF and authorization work for Defense systems.
• Serve as the primary security advisor for engineering teams.
• Develop and maintain clear RMF documentation.

Skills

Cybersecurity experience

Communication skills

Automation mindset

Education

Bachelor’s degree in Cybersecurity, IT, or Computer Science

Tools

eMASS

Docker

Kubernetes

Job description

Senior Defense ISSO/ISSM with Cloud experience

Join and apply for the Senior Defense ISSO/ISSM with Cloud experience role at TDI (Tetrad Digital Integrity)

Tetrad Digital Integrity (TDI) is hiring a Senior DoD Information Systems Security Officer or Manager/Cloud Security Engineer to lead RMF for modern, cloud-hosted systems and guide non-security engineers through the process. This role blends RMF leadership, practical cloud security, and knowledge of DISA STIG implementation. You will work directly with engineers who need clear direction and “hand holding,” while also spotting opportunities to automate repetitive security and compliance work. If you enjoy turning policy into real-world designs, leading others, and improving how RMF is done, not just filling out templates, this is the position for you!

Responsibilities

• Own RMF and authorization work for Defense systems (including cloud and containerized workloads) from initial categorization through ongoing continuous monitoring, using tools such as eMASS.
• Serve as the primary security advisor for engineering teams: interpret requirements, break them into concrete tasks, and ensure they are implemented correctly and on time.
• Lead DISA STIG implementation and remediation (OS, application, database, and/or network), including running scans, interpreting results, and working with engineers to harden systems.
• Review cloud and remote access architectures and recommend improvements that align with current Defense security expectations (e.g., strong identity, segmentation, and monitored admin access paths).
• Develop and maintain clear, accurate RMF documentation (e.g., SSPs, POA&M, SARs) that reflects how systems are really built and operated.
• Automate and streamline repetitive tasks (evidence collection, control checks, reporting) using scripting, templates, or tooling, and create reusable playbooks/checklists for the team.
• Stay current on emerging Defense guidance around cloud, data protection, and AI/ML, and help TDI apply that guidance pragmatically to customer environments.

Qualifications

• U.S. Citizenship and an active DOD Secret clearance (Top Secret preferred).
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science.
• 10+ years of cybersecurity experience with significant time spent supporting DOD RMF for information systems.
• Advanced certifications such as CISSP, CCSP, or relevant cloud security certifications.
• Demonstrated, practical experience with:
  • RMF execution in DOD environments (e.g., working in eMASS, interpreting control requirements, driving systems to authorization).
  • At least one major cloud platform (GCP preferred) and cloud-hosted applications or services to include familiarity with containerized workloads and orchestration (e.g., Docker, Kubernetes) and the security considerations that come with them.
  • DISA STIGs and related tools, and turning findings into specific configuration and design changes.
• Experience working directly with software, infrastructure, or platform engineers, helping them understand what needs to be done and why, and tracking security work to closure.
• An automation mindset, comfortable using scripting or existing tools to reduce manual, low-value security and compliance work.
• Strong written and verbal communication skills, including the ability to:
  • Explain security concepts in plain language.
  • Document risk and decisions in a way that stands up to outside review.
• A proactive, self-directed approach: you seek out gaps, propose solutions, and follow through without needing step-by-step instructions.
• Experience supporting U.S. Navy programs (e.g., NAVWAR, NIWC, or Navy PEOs) or other major DOD mission environments.
• Knowledge of DevSecOps practices and integrating security into CI/CD pipelines.
• Experience assessing or advising on AI/ML or data-intensive workloads from a security and compliance perspective.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Wireless Services, Telecommunications, and Communications Equipment Manufacturing

Referrals increase your chances of interviewing at TDI by 2x