1772 - Information System Security Officer

Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. This position plays a key role in maintaining the cybersecurity posture of secure Department of War information systems through Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, and system certification efforts. The ISSO is responsible for maintaining RMF documentation and cybersecurity artifacts while supporting Assessment and Authorization (A&A) activities and ensuring systems remain secure and compliant throughout their lifecycle.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

• 3-7 years of relevant experience.
• Information assurance IA/Cyber Security or Risk Management Framework (RMF) experience.
• Familiarity with NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
• Experience supporting vulnerability management and cybersecurity compliance activities.
• Experience supporting A&A activities.
• Experience maintaining RMF documentation and security artifacts.
• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.
• Understanding of Controlled Unclassified Information (CUI) requirements and handling procedures.
• Experience supporting secure or air-gapped Department of Defense environments.
• Experience supporting Cross Domain Solution (CDS) technologies.
• Experience with Full Motion Video (FMV) systems, platforms, or supporting infrastructure.
• Experience supporting vulnerability management, security compliance, or incident response activities.
• Experience working collaboratively with ISSMs, system administrators, and network engineers.
• Must be a U.S. citizen.

• Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study.

• CompTIA Security+ is required.
• SSCP is preferred.
• CISSP is preferred.

• Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.

• Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher.
• Clearance may be sponsored for the right candidate.

• Perform routine vulnerability assessments using ACAS and coordinate remediation efforts with engineering staff.
• Review, document, and verify DISA STIG compliance for Windows, Red Hat Enterprise Linux, and supporting infrastructure.
• Develop, maintain, and track Plans of Action and Milestones (POA&Ms).
• Support continuous monitoring activities and maintain the overall cybersecurity posture of assigned systems.
• Review system changes to identify cybersecurity impacts and ensure required documentation remains current.
• Coordinate with system administrators and network engineers to maintain secure and compliant system baselines.
• Support secure CDS operations and associated cybersecurity activities.
• Prepare and provide cybersecurity documentation, reports, and status updates for government stakeholders.
• Develop and maintain cybersecurity procedures, standard operating procedures, and supporting technical documentation.
• Assist with cybersecurity audits, inspections, and compliance reviews.