Information Systems Security Manager

Modern Technology Solutions Inc•Lexington Park, MD

111d•$185,000 - $230,000•Onsite

About The Position

The MTSI Defense Services Division is seeking an experienced Information System Security Manager (ISSM) to lead cybersecurity efforts for a Navy-centric software development environment focused on novel software applications. As the ISSM, you will play a key leadership role in managing and overseeing the security posture of information systems, ensuring their compliance with DoD standards and the Risk Management Framework (RMF). You will work across multidisciplinary teams to maintain the confidentiality, integrity, and availability of the program's critical systems and data. You will be supporting onsite operating independently with the potential to grow a small team for scaling cybersecurity capabilities.

Requirements

8+ years of combined experience working in defensive/offensive cybersecurity, information assurance, penetration testing, software engineering, or related field.
Knowledge of the Department of Navy and Naval Air Systems Command (NAVAIR), to include digital infrastructure/environments, DevSecOps, Continuous Integration/Continuous Development (CI/CD), software factories, cloud-native containerized applications, Risk Management Framework (RMF), continuous Authority to Operate (cATO).
Proven experience in designing, implementing, and maintaining multi-level security architectures across cloud, infrastructure, and platform applications.
Deep proficiency in configuring and managing industry-standard security tools, including firewalls, intrusion detection systems (IDS).
Strong background in DevSecOps, with the ability to integrate and automate cybersecurity within CI/CD pipelines.
Hands-on experience with security monitoring, log analysis, threat intelligence, and digital forensics to identify and respond to system anomalies.
Expert knowledge of the Risk Management Framework (RMF) and Department of War (DoW) cybersecurity directives, including system categorization and continuous monitoring.
Demonstrated ability to lead the full Authorization to Operate (ATO) lifecycle and manage System Security Plans (SSPs) in accordance with federal regulations.
Extensive experience conducting security risk assessments, penetration testing, and compliance audits.
Skilled in developing and enforcing organizational security standards, policies, and procedural documentation.
Ability to serve as a primary cybersecurity advisor to senior leadership, engineering teams, and external stakeholders.
Proven leadership in mentoring information security teams and coordinating cybersecurity requirements with external agencies and vendors.
Strategic thinker capable of analyzing emerging threat vectors and adjusting security measures to maintain a robust security posture.
Strong communication skills, with experience preparing and delivering high-level briefings and metrics on cyber readiness to key stakeholders.
Experience with cloud security (e.g. AWS, Azure GCP).
Familiarity with DevSecOps/Platforms such as AWS (S3, RDS, EC2, ECS, Lambda, SQS, SNS, CloudFormation, etc.), Azure (Azure App Service, Azure Functions, Azure Storage, Azure SQL Database, etc.), Docker, Ansible and experience with DevSecOps tools such as GitHub and Jenkins.
Experience with on-premise compute infrastructure and networks.
Experience in Agile development methodologies.
Experience with defending against known attack vectors.
In-depth knowledge of security frameworks, standards, and guides (e.g. RMF, NIST, CIS, STIGs, FIPS, etc.).
BS in Computer-Science field.
IAM level 2- CISSP, CASP CE+, CGRC, or CISM certification.

Nice To Haves

Data Operations (DataOps), Artificial Intelligence / Machine Learning Operations (AI/MLOps)
Experience supporting electronic warfare systems.
Familiarity with software development and DevSecOps integration.
Awareness of aviation platforms and weapon systems.
Experience with Multi-Level Security (MLS) or Cross Domain Solutions (CDS).
MS in Computer-Science or Cybersecurity field.

Responsibilities

Manage and oversee the security posture of information systems.
Ensure compliance with DoD standards and the Risk Management Framework (RMF).
Maintain the confidentiality, integrity, and availability of critical systems and data.
Design, implement, and maintain multi-level security architectures across cloud, infrastructure, and platform applications.
Configure and manage industry-standard security tools, including firewalls and intrusion detection systems (IDS).
Integrate and automate cybersecurity within CI/CD pipelines.
Perform security monitoring, log analysis, threat intelligence, and digital forensics.
Lead the full Authorization to Operate (ATO) lifecycle and manage System Security Plans (SSPs).
Conduct security risk assessments, penetration testing, and compliance audits.
Develop and enforce organizational security standards, policies, and procedural documentation.
Serve as a primary cybersecurity advisor to senior leadership, engineering teams, and external stakeholders.
Mentor information security teams and coordinate cybersecurity requirements with external agencies and vendors.
Analyze emerging threat vectors and adjust security measures.
Prepare and deliver high-level briefings and metrics on cyber readiness to key stakeholders.
Support electronic warfare systems.
Support software development and DevSecOps integration.
Defend against known attack vectors.