Senior InfoSec Manager: RMF/ATO Lead for DoD Systems

Leidos; Odenton (MD); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Senior Information System Security Manager (ISSM) to support a fast-paced DISA program. The ISSM will oversee the cybersecurity posture of DoD information systems, ensuring RMF accreditation and continuous monitoring with cross‑functional teams.

You will prepare security documentation, lead risk assessments, and coordinate authorization activities to test and operate. A DoD‑level clearance (Secret) is required and relevant certifications are expected, along with strong DoD

Qualifications

• Bachelor’s Degree with 8+ years of experience or Master’s degree with 6+ years of experience.
• CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar cybersecurity certification.
• In-depth knowledge of DoD cybersecurity policies, frameworks, and compliance standards (e.g., NIST 800-53, RMF, FISMA, ICD 503, JSIG).
• In-depth experience with network systems and building/maintaining an ATO for enterprise computing information systems.
• Experience with system security engineering, risk management, and vulnerability assessments.
• Strong understanding of network security, security controls, and common cybersecurity tools (e.g., firewalls, IDS/IPS, SIEM, endpoint protection).
• Clearance: US Secret clearance required

Responsibilities

• Manage the RMF lifecycle for supported systems and maintain Authority to Operate (ATO).
• Provide ISSM, FISMA, and certification and accreditation support for systems.
• Conduct recurring assessments of security controls in eMASS and PPSM.
• Manage whitelist records, address vulnerabilities, and develop POA&Ms as needed.
• Maintain eMASS control records and POA&Ms per ATO conditions and timelines.
• Coordinate cybersecurity activities supporting authorization to test and operate, including assessments and remediation tracking.
• Create and deliver cybersecurity test plans, reports, and authorization package materials.
• Lead cybersecurity governance and reporting, including system architectures and security plans.
• Prepare program documentation and briefings for DISA OAB reviews.

Skills

CISSP/CISM

RMF

DoD policies

Cybersecurity governance

Education

Bachelor's Degree

Master's Degree

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

Leidos is seeking a Senior Information System Security Manager (ISSM) to support a fast-paced DISA program. The ISSM will oversee the cybersecurity posture of DoD information systems, ensuring RMF accreditation and continuous monitoring with cross‑functional teams.

You will prepare security documentation, lead risk assessments, and coordinate authorization activities to test and operate. A DoD‑level clearance (Secret) is required and relevant certifications are expected, along with strong DoD