Senior Information System Security Officer (ISSO)

Aviation Systems Engineering Company; Ridgecrest (CA); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Employee-owned

Comprehensive benefits package

401(k) with match

Tuition assistance

Veteran-friendly

Thriving culture

Job summary

ASEC is seeking a Senior Information System Security Officer to provide strategic cybersecurity leadership for DoD systems, ensuring security, compliance, and operational integrity. You will guide RMF implementations and drive risk-based decisions across teams, working on on-site DoD networks at NAWS China Lake.

The role requires Top Secret clearance, a Master’s degree, and hands-on experience with RMF, STIGs, and NIAP/CC. Strong communication and mentoring skills are essential.

Qualifications

• CompTIA Security+ is required.
• Master’s degree in Information Technology, Cybersecurity, Computer Science, or related field is required; without a degree, one of CISM, CISSP, FITSP-M, or GCIH may suffice.
• 10 years of engineering experience, including at least 5 years in IA/Cybersecurity.
• Experience implementing RMF per DoDI 8510.01.
• Experience applying security controls per CNSSI 1253, NIST 800-53, and JSIG.
• Able to conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP Checker.

Responsibilities

• Lead development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
• Direct vulnerability management activities using ACAS, DISA STIGs, and SCAP Compliance Checker.
• Oversee secure configuration of operating systems and network devices per DISA STIGs.
• Manage continuous monitoring, conduct security audits, and drive risk mitigation.
• Provide SME on NIAP/Common Criteria certifications and APL compliance.
• Prepare and review authorization docs, letters, and MOAs for interconnections.
• Advise leadership and engineers on RMF compliance and cybersecurity best practices.

Skills

Security+ (CompTIA)

RMF

CNSSI 1253 / NIST 800-53 / JSIG

ACAS / STIGs

Vulnerability Assessments

Top Secret clearance

Education

Master’s degree in IT / Cybersecurity / CS

Tools

ACAS

DISA STIGs

SCAP Compliance Checker

Job description

Overview

Location: NAWS China Lake (Ridgecrest, CA)

Security Clearance Requirement: Top Secret

Telework Eligible? No, work will be performed on-site at NAWS China Lake

What You'll Do

As the Senior Information System Security Officer, you will provide strategic cybersecurity leadership, ensuring the security, compliance and operational integrity of mission-critical DoD systems.

Responsibilities

• Lead the development, implementation, and enforcement of cybersecurity policies, standards, and methodologies.
• Direct vulnerability management activities using ACAS, DISA STIGs, and SCAP Compliance Checker.
• Oversee secure configuration of operating systems and network devices in accordance with DISA STIG requirements.
• Manage continuous monitoring efforts, conduct security audits, and drive risk mitigation strategies.
• Provide subject matter expertise on NIAP/Common Criteria certifications and DISA Approved Products List (APL) compliance.
• Prepare and review authorization documentation, certification letters, and MOAs for system interconnections.
• Advise program leadership, system owners, and engineers on RMF compliance and cybersecurity best practices.

Note: This description outlines the general nature and scope of the role. Additional duties may be assigned as necessary.

Requirements

What You'll Bring

• CompTIA Security+ is required. Master’s degree in Information Technology, Cybersecurity, Computer Science, or related field is required. Without a degree, one of the following certifications is required: CISM, CISSP, FITSP-M, or GCIH. Please upload copies of any relevant IT certifications you hold.
• 10 years of engineering experience, including at least 5 years in Information Assurance/Cybersecurity (IA/CS).
• Demonstrated experience implementing the Risk Management Framework (RMF) in accordance with DoDI 8510.01.
• Extensive experience applying security controls outlined in CNSSI 1253, NIST SP 800-53, and JSIG.
• Able to conduct vulnerability assessments using ACAS, DISA STIGs, and SCAP Compliance Checker with automated benchmarks.
• Proven experience implementing DISA STIG configurations across operating systems and network devices.
• In-depth knowledge of continuous monitoring, security audits, risk assessments, and mitigation planning for DoD systems.
• Experience evaluating NIAP/Common Criteria technologies and the DISA Approved Products List (APL).
• Background preparing certification letters, MOAs, and authorization documentation for system interconnections.
• Experience developing IA-related acquisition documentation.
• Familiarity with Intelligence Community Directive (ICD) 705, DoDD 5205.07, and DOD 5205.07-M Volumes 1-4.
• Comfortable mentoring and guiding more junior teammates.

Equally Important

• Ability to build positive, collaborative relationships across teams and with external partners.
• Effective communicator with strong verbal and written skills.
• Proactive, self-directed work style with the ability to operate independently.
• Analytical thinker with proven problem-solving capabilities.
• Highly organized, with the ability to balance competing priorities in a fast-paced environment.

ASEC is committed to providing access and reasonable accommodation in its services, activities, programs, and employment opportunities in accordance with the Americans with Disabilities Act and other applicable laws.

Security Clearance Requirement

• This position requires U.S. citizenship and an active DoD Top Secret clearance. Selected candidate will be subject to a government security investigation and must meet eligibility requirements for access to classified information.

Salary Range

• The anticipated annual salary range for this position is $135,000 - $155,000, commensurate with an individual's experience, qualifications, and skill set. ASEC is committed to providing fair and equitable compensation.

Who We Are

ASEC offers meaningful, mission-driven work within a culture that supports your professional and personal growth. We partner with our government customers to deliver innovative solutions across engineering, information technology, training, and logistics. Above all, we are committed to doing what\'s right for the Warfighter—plain and simple. Explore what makes ASEC different by visiting our website.

Why work at ASEC?

• 100% employee-owned company. Learn more about our Employee Stock Ownership Plan (ESOP) here.
• Comprehensive benefits package, including 11 paid holidays, medical/dental/vision coverage, HSA/FSA options, disability insurance, and more!
• 401(k) with company match
• Tuition assistance for undergraduate and graduate education
• Veteran-friendly employer
• Thriving employee culture

Not the right opportunity for you? Send this job posting to a friend!

ASEC is an Equal Opportunity Employer. We recruit, hire, train, compensate, and promote employees based on qualifications, merit, and business needs, without regard to race, color, religion, sex, national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information, pregnancy or related conditions (including breastfeeding), or any other status protected by law.

ASEC also complies with all applicable pay transparency laws and will not discriminate against employees or applicants for inquiring about, discussing, or disclosing compensation.