Information System Security Officer (ISSO)

Applied Research Solutions • Beavercreek Township, OH

12d

About The Position

Applied Research Solutions (ARS) is seeking an Information System Security Officer to support the development and security hardening of a DevSecOps cloud environment aligned with DoD RMF, NIST SP 800-53 Rev. 5, and CMMC 2.0/NIST SP 800-171 requirements. The environment operates on an Azure-based cloud backbone. The ISSO supports cybersecurity governance and compliance and oversees the lifecycle of Assessment and Authorization (A&A) activities, ongoing Authority to Operate (ATO) compliance, and the accuracy, completeness, and integrity of security artifacts in eMASS.

The role develops, implements, and enforces cybersecurity policies; monitors control inheritance and system boundary changes; conducts risk assessments; and guides engineering teams in aligning system configurations with RMF controls, Zero Trust principles, and DoD Cloud SRG requirements. The ISSO provides security leadership and serves as a primary liaison to government stakeholders, authorizing officials, mission partners, auditors, and cross-functional engineering teams.

The position also involves facilitating security briefings, coordinating remediation, collaborating with development and operations teams, and promoting security awareness. ARS describes itself as a provider of technically integrated solutions and mission support, and highlights employee development, work/life balance, competitive benefits, awards and recognition, and personalized attention from senior managers. Employment is contingent upon successful completion of a background investigation, including criminal history and identity checks.

Requirements

• Must be a US citizen.
• Bachelor’s degree in cybersecurity, computer science, engineering, or a related field, or equivalent experience.
• At least 2 years of cybersecurity engineering experience; preferably supporting DoD, federal, or regulated environments.
• Must hold a Secret security clearance at minimum.
• Hands-on experience with Azure security tools, including Microsoft Defender suite, Sentinel, Purview, and Azure Policy.
• Strong knowledge of DevSecOps practices, CI/CD pipelines, and integrating security automation into development workflows.
• Deep understanding of DoD RMF, NIST SP 800-53 Rev. 5 controls, and security assessment and evidence requirements.
• Experience implementing CMMC 2.0 or NIST SP 800-171 controls, including documentation, continuous monitoring, and audit readiness.
• Proficiency with vulnerability management tools, remediation processes, and risk-based prioritization.
• Familiarity with threat intelligence platforms, adversary TTP analysis, and building threat-informed security detections.
• Exceptional communication, documentation, and interpersonal skills to translate security requirements into actionable guidance and work effectively with technical and non-technical audiences.
• Successful completion of a background investigation, including criminal history and identity checks.

Responsibilities

• Develop and implement information security policies and procedures.
• Conduct risk assessments and vulnerability testing.
• Monitor and respond to security incidents and threats.
• Ensure compliance with industry standards and regulations.
• Manage security audits and assessments.
• Develop and deliver security awareness training to employees.
• Stay up to date with security trends and technologies.
• Maintain working relationships with the ISO, AO, SCA, and other IS ISSOs.
• Oversee Assessment and Authorization (A&A) activities and maintain continuous ATO compliance.
• Maintain the accuracy, completeness, and integrity of security artifacts in eMASS.
• Monitor control inheritance and system boundary changes.
• Guide engineering teams in aligning configurations with RMF controls, Zero Trust principles, and DoD Cloud SRG requirements.
• Coordinate remediation activities and collaborate with development and operations teams.
• Serve as a liaison to government stakeholders, authorizing officials, mission partners, auditors, and engineering teams.
• Facilitate security briefings and promote a strong security culture.
• Perform other duties as assigned.

Benefits

• Industry-competitive benefits package.
• Awards and recognition program.
• Personalized attention from ARS Senior Managers.
• Employee culture focused on career goals, employee development, and work/life balance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level