Top Tech Jobs & Startup Jobs

Maintains the security posture of DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include developing RMF authorization packages, continuous monitoring, configuration management, vulnerability identification, incident handling, audit review, system recovery, compliance inspections, and security training. The ISSO coordinates with ISSMs, authorizing officials, and government and contractor organizations to support assessment and authorization activities.

Supports DoD cyber investigations and digital forensics by decrypting data, recovering deleted or fragmented information, extracting data from flash memory and damaged devices, and researching storage architectures and encryption. Produces detailed technical reports for federal court and intelligence use. Requires extensive cryptology, programming, digital forensics, file-system, and device-access expertise, along with an active TS/SCI clearance.

Designs, develops, and delivers IT training programs and materials (including distance learning and interactive content), conducts needs analysis, coordinates scheduling and LMS administration, maintains 508-compliant course standards, provides second-level support, and manages multiple training projects while ensuring accuracy and continuous improvement.

Provide systems engineering and technical analysis for EO/IR/laser sensor projects supporting NSWC Crane USV and maritime programs. Perform trade studies, requirements development, test support, documentation standardization, hardware installation/checkout, and engineering evaluations. Support algorithm validation (ATR/computer vision), modeling and simulation, and prepare reports, procedures, and technical inputs for test events.

Manage install, configure, secure, patch, and maintain enterprise Linux servers (RHEL, Rocky, Ubuntu) in virtual and physical environments. Troubleshoot system, network, storage, and application issues; perform monitoring, compliance remediation, disaster recovery, and identity integration. Develop automation (Bash, Python, Ansible), maintain documentation, coordinate changes/outages, and support DoD/IC deployment environments through December 2026.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Support RMF activities, security authorization, and system security posture for a large enterprise IT program. Perform RMF documentation, security control assessments, vulnerability identification, audits, and provide security guidance to engineering teams. Maintain compliance with federal regulations and assist in security authorization and accreditation processes.

Manage day-to-day security operations and maintain the operational security posture for DoD SAP, SCI, and Collateral systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, assess configuration changes, coordinate hardware/software modifications, review audit records, identify vulnerabilities and recommend countermeasures, and support security training, incident handling, and SAP activities. Work closely with ISSM/ISO and support internal/external customers. Requires active TS/SCI and CI polygraph eligibility.

Support DoD intelligence program by performing cybersecurity/RMF activities, vulnerability scanning and remediation using STIGs, ACAS, and DISA SCAP for Linux/Windows, creating and tracking POA&Ms, maintaining security authorization documentation, coordinating audits and threat communications, and guiding junior staff.