Senior Manager Information Security

ASRC Federal Holding Company; Maryland; On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health care

401(k)

Education assistance

Job summary

ASRC Federal is seeking an experienced Information System Security Officer with an active Secret clearance to support DEVCOM-CBC and TDAC. You will maintain RMF/ATO status, manage artifacts and plans, and guide vulnerability management across multiple systems.

The role requires deep expertise in RMF, DoD/Army regulations, eMASS, and incident response. Strong communication and leadership skills are essential for coordinating with government staff and teammates in Aberdeen Proving Ground, MD.

Qualifications

• Active DoD Secret clearance required.
• Bachelor’s degree in Computer Science, IT, Engineering, or related field with 8+ years experience or Master’s with 6+ years or 12 years in lieu of degree.
• 5+ years of hands-on RMF EMASS Authorization duties.
• Familiarity with Army/DoD cybersecurity regulations and STIGs.

Responsibilities

• Maintain current ATO status for DEVCOM systems and provide RMF guidance.
• Develop and maintain system-level artifacts and controls mapping in eMASS.
• Run vulnerability scanners and compliance checkers (STIGs, Nessus/ACAS).
• Track and report IAVAs for DEVCOM systems.
• Manage POA&M development, updates, and closure.
• Oversee network packages within eMASS and authorization docs.
• Coordinate with government and contractor organizations on RMF.

Skills

RMF EMASS Authorization duties

Incident response

Vulnerability management

Team leadership

Communication skills

DoD cybersecurity regulations

Education

Bachelor’s degree in Computer Science / IT / Engineering or related field

Master’s degree in Computer Science / IT / Engineering or related field

12 years of work experience in lieu of degree

Tools

eMASS

STIG/SRG audit processes

AVS (Army Account Validation System)

Nessus/ACAS Scans

Job description

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work

ASRC Federal Technology Solutions LLC is looking for an experienced Information System Security Officer with a minimum of an active Secret security clearance to support their work with DEVCOM-CBC and the Transformation Decision Analysis Center (TDAC) organization, and who will serve as the Team's direct manager. This position supports the development, implementation, and maintenance of cybersecurity policies, standards, and procedures, ensuring compliance with applicable Department of Defense (DoD), Army, and DEVCOM CBC regulations.

In this role, you will provide cybersecurity support to the DEVCOM-CBC G-6 Cybersecurity Branch, focusing on all aspects of Risk Management Framework (RMF) activities, cybersecurity assessments, and incident response. This role requires a deep understanding of cybersecurity principles, a strong analytical ability, and excellent communication skills to effectively convey complex information to both technical and non-technical audiences, while maintaining a broad portfolio of compliance and accounts management responsibilities across unclassified, classified, and standalone systems.

KEY RESPONSIBILITIES

• Maintain current Authority to Operate (ATO) status for DEVCOM systems and provide RMF guidance and support to other DEVCOM/TDAC locations with similar systems.
• Develop, update, and/or modify the system-level artifacts (e.g., TTPs, plans, policies, procedures, hardware/software lists, data flow, system architecture diagrams, PIAs, Ports/Protocols/Services, MOA/MOU, etc...) and ensure they are associated with corresponding controls in eMASS.
• Obtain, run, analyze, and import all applicable vulnerability scanners and compliance checkers as required, including STIGs, Nessus/ACAS Scans, etc...
• Track and report IAVAs related to DEVCOM systems.
• Create, modify, and/or maintain all aspects of the implementation plan and test results, as defined by DOD, Army, NETCOM, and DEVCOM requirements.
• Manage Plans of Action and Milestones (POA&M), including development, status updates, milestone tracking, and closure.
• Manage assigned network packages within eMASS and maintain accurate, current authorization documentation.
• Create, modify, and/or maintain all aspects of CONMON.
• Utilize existing or develop custom solutions to facilitate RMF requirements, reduce timelines and provide up-to-date status reporting of compliance.
• Update and track cybersecurity test results, implementation plans, and risk assessments.
• Evaluate STIG checklists and document compliance status, deficiencies, and required remediation actions.
• Perform first-response coordination for Negligent Disclosure of Classified Information incidents in accordance with organization SOPs for incident response.
• Conduct vulnerability management activities, including identifying, tracking, and coordinating corrective actions.
• Oversee and manage small team with administrative and personnel duties.
• Serve as liaison between government and contractor organizations.

REQUIRED QUALIFICATIONS

• Active DoD Secret clearance or higher. Candidates without a minimum of a Secret clearance will not be considered.
• Bachelor’s degree (BA/BS) in Computer Science, Information Technology, Engineering, or a related field and 8 additional years of experience
• OR Master’s degree in Computer Science, Information Technology, Engineering, or a related field or 6 additional years of experience
• OR a total of 12 years of work experience in the field in lieu of degree
• 5 or more years of hands-on RMF EMASS Authorization duties
• Working knowledge of DoD and Army cybersecurity regulations including Army Regulation 25-2, DoD 8140, and DoD RMF policy
• Experience with Active Directory account management and STIG/SRG audit processes
• Familiarity with the Army Account Validation System (AVS) or equivalent DoD workforce compliance tracking platforms

PREFERRED QUALIFICATIONS

• Direct experience with eMASS, POA&M and RMF processes and responsibilities
• CISSP or CISM certification
• Experience supporting DEVCOM or Army G-6 cybersecurity programs
• Personnel management experience
• Experience serving as an Enhanced Trusted Agent for PKI hardware token issuance
• Experience performing Software Assurance or Hardware Assurance reviews for DoD networks
• Familiarity with NSA and Army data sanitization and destruction policy

CLEARANCE LEVEL

• This position requires an active Secret clearance.

EDUCATION REQUIREMENTS

• Bachelor’s degree in Information Technology, Computer Science, or a related field or 10 years of experience in lieu of the degree
• Master’s degree in Information Technology, Computer Science, or a related field

CERTIFICATION

• DoDI 8140.03 qualification for DCWF Work Role Information Systems Security Manager (722 Advance). Accepted foundational qualifications include certifications mapped to Work Role 722 Advance in the current DoD 8140 Qualification Matrix, such as CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, and GSLC.

Preferred

• CISM
• CISSP
• CISSP-ISSMP

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

• This position primarily operates in a professional office environment at Aberdeen Proving Ground, MD, working within or alongside the DEVCOM-CBC G-6 Cybersecurity Branch. The role involves extended use of computer equipment and may require the candidate to move between buildings on the installation to support users and coordinate with government staff. Some work may involve access to classified facilities and systems. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Job Details

Job Family

Defense and Intelligence

Job Function

Information Security

Pay Type

Salary

Hiring Min Rate

140,000 USD

Hiring Max Rate

180,000 USD