Senior RMF & DoD Security Analyst

Oceaneering; Chesapeake (VA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health and Wellness

Retirement Savings

Paid Time Off

Tuition Reimbursement

Parental Leave

Job summary

Oceaneering is seeking an Information System Security Officer (ISSO) to oversee cybersecurity controls for classified systems under DCSA governance. The role involves ensuring compliance with RMF, NIST SP 800-53, and DAAPM, and supporting system accreditation throughout the lifecycle.

Responsibilities include developing SSPs and POA&Ms, conducting vulnerability assessments, and coordinating with system owners and security leadership.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field or equivalent experience.
• 3–5+ years of cybersecurity, information assurance, or classified system operations.
• Hands-on experience supporting DoD RMF, NIST SP 800-53 controls, and DAAPM compliance.
• Familiarity with DoD directives and federal cybersecurity regulations.

Responsibilities

• Manage cybersecurity compliance for classified systems per DoD RMF, NIST SP 800-53, DAAPM, and related directives.
• Develop and maintain SSPs, POA&Ms, Continuous Monitoring plans and other accreditation artifacts for DCSA.
• Conduct periodic security reviews, vulnerability scans, and assessments; track and remediate findings.
• Oversee configuration management, baseline controls, and secure configurations across environments.
• Coordinate with system owners, admins, PMs, and leadership to maintain security and support audits.
• Monitor and document security incidents; coordinate responses with teams and ensure escalation and documentation.
• Ensure proper account management, access reviews, least privilege, and need-to-know enforcement.
• Support DCSA inspections and assessments by preparing documentation and coordinating interviews.
• Provide security guidance for changes, upgrades, and new integrations, noting evolving DoD/DCSA requirements.

Skills

RMF compliance

NIST SP 800-53

DCSA DAAPM

DoD security regulations

Vulnerability assessment

SIEM monitoring

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ACAS

Nessus

SCCM

SIEM

Job description

Oceaneering is seeking an Information System Security Officer (ISSO) to oversee cybersecurity controls for classified systems under DCSA governance. The role involves ensuring compliance with RMF, NIST SP 800-53, and DAAPM, and supporting system accreditation throughout the lifecycle.

Responsibilities include developing SSPs and POA&Ms, conducting vulnerability assessments, and coordinating with system owners and security leadership.