Sigma Defense is seeking an Information System Security Officer to join our team at March Air Reserve Base. This position plays a key role in maintaining the cybersecurity posture of secure Department of War information systems through Risk Management Framework (RMF) activities, continuous monitoring, vulnerability management, and system certification efforts. The ISSO is responsible for maintaining RMF documentation and cybersecurity artifacts while supporting Assessment and Authorization (A&A) activities and ensuring systems remain secure and compliant throughout their lifecycle.
Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.
Requirements
- 3-7 years of relevant experience.
- Information assurance IA/Cyber Security or Risk Management Framework (RMF) experience.
- Familiarity with NIST SP 800-53 security controls and DISA Security Technical Implementation Guides (STIGs).
- Experience supporting vulnerability management and cybersecurity compliance activities.
- Experience supporting A&A activities.
- Experience maintaining RMF documentation and security artifacts.
- Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.
- Understanding of Controlled Unclassified Information (CUI) requirements and handling procedures.
- Experience supporting secure or air-gapped Department of Defense environments.
- Experience supporting Cross Domain Solution (CDS) technologies.
- Experience with Full Motion Video (FMV) systems, platforms, or supporting infrastructure.
- Experience supporting vulnerability management, security compliance, or incident response activities.
- Experience working collaboratively with ISSMs, system administrators, and network engineers.
- Must be a U.S. citizen.
Mandatory Certifications:
- CompTIA Security+ is required.
- SSCP is preferred.
- CISSP is preferred.
Computer Programs/Software:
- Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker.
Personnel Clearance Level:
- Candidate must possess or have the ability to obtain an active TS/SCI security clearance or higher.
- Clearance may be sponsored for the right candidate.
Education Requirements:
- Bachelor's degree from an accredited college or university in a Cybersecurity or related field of study.
Essential Job Duties (not all-inclusive):
- Perform routine vulnerability assessments using ACAS and coordinate remediation efforts with engineering staff.
- Review, document, and verify DISA STIG compliance for Windows, Red Hat Enterprise Linux, and supporting infrastructure.
- Develop, maintain, and track Plans of Action and Milestones (POA&Ms).
- Support continuous monitoring activities and maintain the overall cybersecurity posture of assigned systems.
- Review system changes to identify cybersecurity impacts and ensure required documentation remains current.
- Coordinate with system administrators and network engineers to maintain secure and compliant system baselines.
- Support secure CDS operations and associated cybersecurity activities.
- Prepare and provide cybersecurity documentation, reports, and status updates for government stakeholders.
- Develop and maintain cybersecurity procedures, standard operating procedures, and supporting technical documentation.
- Assist with cybersecurity audits, inspections, and compliance reviews.
Salary Range: $118,000 - $138,000 annually.
Benefits
- Dental and Vision Insurance
- Medical Insurance to Include HSA, FSA, and DFSA Plans
- Life and AD&D coverage
- Employee Assistance Program (EAP)
- 401(k) Plan with Company Matching Contributions
- 160 Hours of Paid Time Off (PTO)
- 12 (Floating) Holidays
- Educational Assistance
- Highly Competitive Salary
Skills Required
- 3-7 years of relevant experience
- Information assurance, cybersecurity, or Risk Management Framework experience
- Familiarity with NIST SP 800-53 security controls and DISA STIGs
- Experience with vulnerability management and cybersecurity compliance activities
- Experience supporting Assessment and Authorization activities
- Experience maintaining RMF documentation and security artifacts
- Familiarity with ACAS, STIG Viewer, and SCAP Compliance Checker
- Understanding of Controlled Unclassified Information requirements and handling procedures
- Experience supporting secure or air-gapped Department of Defense environments
- Experience supporting Cross Domain Solution technologies
- Experience with Full Motion Video systems, platforms, or supporting infrastructure
- Experience supporting vulnerability management, security compliance, or incident response activities
- CompTIA Security+ certification
- U.S. citizenship
- Active TS/SCI security clearance or ability to obtain one
- Bachelor's degree in Cybersecurity or a related field
- SSCP certification
- CISSP certification
What We Do
Sigma Defense is a leading technology company serving the Department of Defense, specializing in C5ISR, CJADC2, electronic warfare, and DevSecOps. They provide software-defined solutions and hardware to connect warfighters and commands, enabling faster decision-making and mission outcomes. The company has expanded its capabilities through strategic acquisitions like SOLUTE and SUB-U Systems, focusing on digital modernization and tactical edge connectivity for all U.S. military branches.
_0.png)
