Cybersecurity Engineer (ISSO)

AnaVation • San Antonio, TX

9d • Onsite

About The Position

AnaVation is seeking a highly motivated Information Systems Security Officer (ISSO) to implement cybersecurity, Risk Management Framework (RMF), and continuous monitoring activities supporting Department of Defense software factories and enterprise cloud environments. The Cybersecurity Engineer will be embedded with one or more mission agile teams, working with Government leadership, security personnel, cyber operations and penetration teams, product owners, software developers, and DevSecOps engineers. The role supports secure cloud-native capabilities and rapid software delivery through Continuous Authority to Operate (cATO).

This position provides enterprise cybersecurity operations support across multiple mission value streams and classified environments. The work includes executing RMF activities, maintaining cybersecurity documentation, supporting assessments and continuous monitoring, managing vulnerabilities, and ensuring compliance with Department of Defense cybersecurity policies and mission security standards. The position is full-time and on-site in San Antonio, Texas, supporting Unclassified, Secret, and SCI environments.

Requirements

• U.S. citizenship.
• TS/SCI clearance obtained within the last two years and CI Polygraph obtained within the last five years.
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, Information Systems, or a related technical field.
• One or more of the following certifications: Security+, CySA+, CASP+, or an equivalent DoD 8140 certification.
• Nine or more years supporting Department of Defense cybersecurity missions.
• Nine or more years supporting RMF implementation and cybersecurity compliance activities.
• Experience maintaining SSPs, POA&Ms, SARs, and RMF documentation.
• Experience supporting vulnerability management, STIG implementation, and continuous monitoring.
• Experience supporting Agile or SAFe software development environments.
• Experience supporting DevSecOps or enterprise cloud environments.
• Working knowledge of NIST RMF, NIST SP 800-53, CNSSI guidance, DoD cybersecurity policy, and DISA STIGs.
• Experience using cybersecurity compliance and vulnerability management tools.
• Excellent written and verbal communication skills.
• Ability to work full-time on-site in San Antonio, Texas.

Nice To Haves

• TS/SCI with CI Polygraph.
• Advanced degree in Cybersecurity, Computer Science, Engineering, Information Assurance, or a related field.
• One or more of the following certifications: CISSP, CAP, or Certified Cloud Security Professional (CCSP).
• Ten or more years supporting Department of Defense cybersecurity missions.
• Experience supporting software factories.
• Experience supporting Kubernetes and OpenShift.
• Experience supporting Iron Bank or hardened container environments.
• Experience supporting Continuous Authority to Operate (cATO).
• Experience implementing Zero Trust security controls.
• Experience supporting enterprise DevSecOps pipelines.
• Experience supporting IL4/IL5/IL6 cloud environments.
• Experience supporting Cyber Operations Teams.
• Experience supporting Cyber Penetration Teams.
• Experience supporting multiple military services and Combatant Commands.

Responsibilities

• Execute RMF activities supporting system authorization, continuous monitoring, and Continuous Authority to Operate (cATO).
• Maintain RMF documentation, including SSPs, POA&Ms, SARs, hardware and software inventories, and security artifacts.
• Support cybersecurity assessments conducted by Security Control Assessors, penetration testing teams, and Authorizing Officials.
• Monitor system cybersecurity posture and coordinate remediation of vulnerabilities and assessment findings.
• Perform vulnerability management, STIG implementation, configuration compliance validation, and security control assessments.
• Support Zero Trust security principles, cloud security controls, Kubernetes/OpenShift security, container hardening, and DevSecOps security practices.
• Collaborate with Government leadership, ISSMs, ISSEs, software developers, cloud engineers, Cyber Operations Teams, and Cyber Penetration Teams to integrate cybersecurity into Agile software development.
• Maintain continuous monitoring documentation, audit evidence, and cybersecurity reporting.
• Evaluate cybersecurity findings and recommend corrective actions to improve system security posture.
• Assist with annual cybersecurity inspections, assessments, audits, and operational readiness activities.
• Prepare technical documentation, executive reports, and cybersecurity metrics to support Government decision-making.
• Support cybersecurity operations across Unclassified, Secret, and SCI environments.

Benefits

• Generous cost sharing for medical insurance for the employee and dependents.
• Company-paid dental insurance for employees and dependents.
• Company-paid long-term and short-term disability insurance.
• Company-paid vision insurance for employees and dependents.
• 401(k) plan with generous match and 100% immediate vesting.
• Competitive pay.
• Generous paid leave and holiday package.
• Tuition and training reimbursement.
• Life and AD&D insurance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior