Information Systems Security Officer - EW&C

Join a forward‑leaning team securing one of the Army’s most advanced electromagnetic warfare capabilities. We are seeking an Information System Security Officer (ISSO) to lead all cybersecurity activities for Spectrum Core in direct support of PM EW&C. In this high‑impact role, you will serve as the program’s authoritative voice on risk, compliance, and system accreditation across tactical, RF, and cloud environments.

You will own the full RMF lifecycle, from initial categorization through IATT, ATO, and ongoing residual risk management, while ensuring cybersecurity considerations remain synchronized with engineering, fielding, and operational priorities. Reporting directly to the Government Project Officer, you will provide unfiltered, technically grounded advice on cyber posture, remediation paths, and mission‑relevant risks. Because Spectrum Core spans NIPR, SIPR, RF systems, and modern web architectures, your work goes far beyond paper STIGs: you will shape real‑world cybersecurity implementation at every edge of the system.

This role offers a rare opportunity to influence cybersecurity decisions at the intersection of emerging EW technology, Army acquisition, and operational employment. You will collaborate with an independent SCA‑V, guide the program through evolving accreditation challenges, support FCL/DD254 requirements while Airbase is onboarding to NISS, and ensure that fielding and assessment activities remain cyber‑sound even when conducted at remote ranges or division sites.

For a cybersecurity professional seeking meaningful responsibility, direct access to government leadership, and a mission where decisions genuinely affect the Warfighter, this position provides significant scope and impact.

• →Own the RMF package end to end: SSP, security controls, POA&M, artifacts, continuous monitoring. eMASS is the system of record.
• →Drive IATT for developmental test and ATO for operational use. SIPR instance in Phase 3 is on the critical path.
• →STIGs, vulnerability management, SCAP, ACAS/Nessus or equivalent, configuration baselines. Read a scan, separate false positives from real findings.
• →Advise the Project Officer directly on residual risk, fielding impact, and provide concise written recommendations.
• →Coordinate with the AO, SCA / SCA-V, ISSM, and system owners. Prepare assessments. Do not grade own homework.
• →Bake cyber into integration, test, and fielding from week one. Sit with the Integrator, not after them.
• →Support FCL sponsorship, DD254, and contractor personnel security so Airbase personnel can touch the system.
• →Travel only when physical presence changes the assessment. Pre-brief and post-brief others by VTC.
• →Use AI daily to map controls, draft SSP language, summarize STIG results, and build assessment checklists. Sign the residual-risk memo. No CUI in public models.

• Minimum 5 years experience.
• 8+ years DoW/DoD cybersecurity with hands-on ISSO or equivalent RMF execution. Policy-only time does qualify.
• DoD 8140 / 8570 IAM Level II now, or Level III. Security+ alone is not IAM II for this seat. CISSP, CISM, CAP, or CASP+ preferred.
• Demonstrated eMASS (or equivalent) package ownership through an authorization decision.
• Working knowledge of NIST SP 800-53, CNSSI 1253, STIGs, continuous monitoring, and IATT vs ATO.
• Able to tell a PM “no” with a mitigation, a cost, and a date.
• Uses AI tools to accelerate cyber work and can provide a redacted example.

• Bachelor of Science Degree (Engineering, Computer Science or related field preferred).
• 4 years of experience may be substituted for a B.S. Degree.

• RMF on RF, sensor, EW, PNT, or other tactical systems. Cloud / IL5 / SIPR enclave experience.
• Army PdM or PEO ISSO time. DEVCOM lab systems. ATEC test support.
• ACAS, HBSS/ESS, SCAP, STIG Viewer, eMASS, A&A tools.
• Top Secret Clearance.

The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements.