DoW Information Systems Security Manager (ISSM) - Navy
About The Position
Tetrad Digital Integrity (TDI) is seeking Risk Management Framework (RMF) subject matter experts as Information Systems Security Managers to support cloud-based and Artificial Intelligence (AI) integrated systems. Candidates should have demonstrated experience building and maintaining RMF packages from development through sustainment, be technically sharp, and ready to work in a fast-paced environment on advanced systems. The role requires experts who can support ATO efforts and translate DoW Component RMF, NIST 800-53, and Cloud SRG guidance into clear, defensible deliverables. These roles require in-depth knowledge of DoW requirements and the ability to independently lead and support complex systems integrating cloud IaaS/SaaS, custom applications, and AI. The position offers opportunities to work with cutting-edge technology, leading artificial intelligence models, and make a visible impact on mission systems, including cloud-native, containerized workloads. Multiple openings are available supporting DoW programs in the Northern Virginia area, with options for hybrid commute and remote work depending on skill set and security clearance level. Candidates must possess an active Secret or Top-Secret security clearance.
Requirements
- Active Secret or Top-secret security clearance.
- Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology, and 8+ years of cybersecurity experience, including demonstrated experience supporting Risk Management Framework (RMF) activities for Department of War (DoW) systems.
- Security certifications such as Certified Information System Security Professional (CISSP) and/or Certified Information System Manager (CISM).
- Practical knowledge and application of concepts with cloud platforms.
- Strong knowledge of containerized environments (e.g., Docker, Kubernetes) and container security best practices.
- Familiarity with Generative AI technologies, including LLMs and AI/ML security considerations.
- Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and other relevant cybersecurity frameworks.
- Experience with security risk assessments in DoW environments.
Nice To Haves
- Experience with AWS, Azure and/or Google Cloud Platform (GCP), including IAM, VPC, Kubernetes, and security-related services are preferable.
Responsibilities
- Lead and support RMF execution and customer coordination in an IL 6 environment
- Provide expert guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, and DoW-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
- Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads.
- Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms within cloud infrastructure.
- Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
- Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
- Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
- Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
- Support security control assessments (SCAs) and coordinate with third-party assessors.
- Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
