Senior ISSM - RMF/cATO Leader for DoD Cloud (On-site SA)

AnaVation LLC; San Antonio (TX); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

401k with match

Paid time off

Job summary

AnaVation is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity engineering, RMF execution, and continuous monitoring for DoD software factories and enterprise cloud environments.

This full-time on-site role is based in San Antonio, TX, collaborating with Government leadership, COT, CPT, product teams, and DevSecOps personnel to maintain secure cloud-native capabilities while accelerating software delivery.

Qualifications

• Nine or more years supporting Department of Defense cybersecurity missions.
• Nine or more years serving as an ISSM, ISSE, or senior cybersecurity engineer.
• Experience implementing the Risk Management Framework (RMF).
• Experience achieving and maintaining Authority to Operate (ATO).
• Experience supporting Continuous Monitoring programs.
• Experience supporting DevSecOps environments.
• Experience supporting Agile or SAFe software development.
• Experience supporting enterprise cloud environments.
• Knowledge of NIST RMF, NIST 800-53, CNSSI guidance, DoD cybersecurity policy, and STIG implementation.

Responsibilities

• Lead RMF implementation supporting initial ATOs and Continuous ATO (cATO).
• Serve as the cybersecurity lead supporting multiple mission value streams.
• Develop and maintain RMF authorization packages including SSPs, SARs, POA&Ms and supporting artifacts.
• Coordinate cybersecurity assessments with Authorizing Officials, Security Control Assessors, penetration testing teams, and engineering organizations.
• Integrate cybersecurity requirements into Agile and SAFe software development activities.
• Support planning, execution, remediation, and continuous monitoring.
• Ensure cybersecurity controls remain operational across development, testing, staging, and production environments.
• Coordinate vulnerability management, STIG implementation, POA&Ms tracking, and security control validation.
• Support Zero Trust implementation, cloud security, Kubernetes/OpenShift security, container hardening, and DevSecOps pipeline security.
• Evaluate cybersecurity risks and provide mitigation recommendations supporting mission operations.
• Support annual cyber assessments, inspections, and operational readiness activities.
• Develop executive-level briefings, risk assessments, and cybersecurity recommendations.
• Support operations across Unclassified, Secret, and SCI environments as required.

Skills

Cybersecurity leadership

RMF implementation

ATO/Secret to Unclassified

DevSecOps collaboration

Agile/SAFe

Cloud security

Kubernetes/OpenShift

Education

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field

Job description

AnaVation is seeking an Information Systems Security Manager (ISSM) to lead cybersecurity engineering, RMF execution, and continuous monitoring for DoD software factories and enterprise cloud environments.

This full-time on-site role is based in San Antonio, TX, collaborating with Government leadership, COT, CPT, product teams, and DevSecOps personnel to maintain secure cloud-native capabilities while accelerating software delivery.