Senior DoD RMF Security Manager - Secret

FishEye Software, Inc.; Maynard (MA); On-site; USD 85,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Flexible schedule

Job summary

FishEye Software is seeking an experienced Information System Security Manager (ISSM) to oversee security and compliance of classified information systems and CUI environments. This role supports DoD RMF, NIST SP 800-53/171 and CMMC Level 2, collaborating with leadership, government agencies, and IT teams. A Secret clearance and U.S.

citizenship are required. You will manage security policies, SSPs, assessments, and authorization activities while coordinating with DCSA and stakeholders to reduce

Qualifications

• U.S. Citizenship and an active DoD Secret Clearance required.
• Bachelor's degree with 4+ years of relevant experience or equivalent qualifications.
• Current Security+ or higher for IAM Level I with ability to obtain IAM Level II.
• Knowledge of RMF, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, and applicable DoD cybersecurity requirements.
• Experience supporting classified systems, DCSA reviews, security assessments, or system authorization processes.
• Experience administering Microsoft 365, including GCC High, Entra ID, Exchange Online, Teams, and SharePoint.
• Proficiency in access control, security documentation, auditing tools, secure data transfer methods, and system hardening.
• Strong communication, documentation, organizational, and interpersonal skills.

Responsibilities

• Develop, implement, and maintain information system security policies, procedures, safeguards, and compliance for classified systems and CUI environments.
• Maintain SSPs, POA&Ms, access records, and supporting security documentation and evidence.
• Implement and assess security controls per RMF, NIST 800-53/171, CMMC Level 2, and DoD requirements.
• Coordinate with DCSA, SCAs, and stakeholders on assessments, authorization activities, and remediation.
• Advise leadership on cybersecurity risks, priorities, and improvements.
• Administer and monitor Microsoft 365 environments (GCC High, Entra ID, Exchange Online, Teams, SharePoint).
• Manage user onboarding/offboarding, permissions, privileged access, and access reviews.
• Oversee classified data handling, labeling, malware scanning, secure transfers, and configuration management.
• Secure Windows/AD/Linux through hardening, patching, access controls, and vulnerability management.
• Coordinate security monitoring and incident response; investigate vulnerabilities and track corrective actions.
• Oversee application security testing and remediation with developers.
• Coordinate cybersecurity awareness and user training on phishing and CUI protection.

Skills

Security clearance

Policy management

RMF knowledge

Incident response

Microsoft 365 admin

Communication skills

Security documentation

Education

Bachelor's degree

4+ years experience

Security+ / CISSP / CISM

Tools

Microsoft 365

Job description

FishEye Software is seeking an experienced Information System Security Manager (ISSM) to oversee security and compliance of classified information systems and CUI environments. This role supports DoD RMF, NIST SP 800-53/171 and CMMC Level 2, collaborating with leadership, government agencies, and IT teams. A Secret clearance and U.S.

citizenship are required. You will manage security policies, SSPs, assessments, and authorization activities while coordinating with DCSA and stakeholders to reduce