Senior DoD ISSM — RMF & Cybersecurity Lead

KMS Solutions, LLC; Alexandria (VA); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

PTO

Holidays

Tuition reimbursement

Life insurance

Disability insurance

Referral bonus

Annual bonus

Job summary

KMS Solutions, LLC is seeking an Information Systems Security Manager (ISSM) in Alexandria, VA, to provide senior cybersecurity leadership, RMF support, and accreditation for PMS 340 systems. The role requires DoD RMF experience and security certifications.

Responsibilities include managing RMF packages, assessments, and documentation, coordinating with NAVSEA and NSW, and guiding cybersecurity efforts across undersea, maritime, surface, and air systems. Travel may be required.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline.
• Minimum 5 years of cybersecurity or RMF-based experience supporting DoD systems.
• DoD 8570.01M IAT/IAM Level II or III certification (e.g., Security+).
• Operating Systems certification (Windows or Linux).
• Experience with RMF, A&A processes, and cybersecurity validation of DoD IT systems.

Responsibilities

• Lead development, maintenance, and submission of RMF accreditation packages for PMS 340 systems, ensuring compliance with DoD, DoN, NAVSEA CS‑DoN SOPs, and business rules.
• Oversee cybersecurity documentation including SSPs, POA&Ms, validation procedures, and risk assessments, ensuring systems meet information assurance and security requirements.
• Conduct and oversee security control assessments in accordance with NIST SP 800‑53, 800‑53A, CNSSI 1253, and RMF requirements.
• Perform and direct vulnerability assessment and compliance reviews using ACAS, SCAP, and Nmap for PMS 340 systems.
• Manage cybersecurity workflows and accreditation artifacts using eMASS.
• Support cybersecurity Test & Evaluation phases including cooperative vulnerability identification, adversarial testing, penetration assessments, and adversarial assessments.
• Identify and mitigate cybersecurity risks across PMS 340 systems; ensure risk treatment, compliance, and monitoring throughout the system lifecycle.
• Coordinate cybersecurity activities across NAVSEA, NSW, SOCOM, NUWC, and other stakeholders, supporting IPTs, Working Groups, and program reviews.
• Prepare cybersecurity reports, briefs, and documentation, clearly articulating cybersecurity requirements to PMO leadership and technical teams.
• Provide cybersecurity guidance, engineering support, and subject matter expertise for PMS 340 systems, including undersea, maritime, surface, air, and expeditionary technologies.
• Support PMS 340 leadership in ad hoc cybersecurity meetings and engagements, including those requiring travel.

Skills

RMF expertise

DoD cybersecurity

Security+ or IAT II/III

NIST SP 800-53

Education

Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline

Tools

eMASS

ACAS

Nmap

SCAP

Job description

KMS Solutions, LLC is seeking an Information Systems Security Manager (ISSM) in Alexandria, VA, to provide senior cybersecurity leadership, RMF support, and accreditation for PMS 340 systems. The role requires DoD RMF experience and security certifications.

Responsibilities include managing RMF packages, assessments, and documentation, coordinating with NAVSEA and NSW, and guiding cybersecurity efforts across undersea, maritime, surface, and air systems. Travel may be required.