Defense Information Systems Security Officer – Cloud
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Responsibilities:
- Lead and support RMF activities through categorization, control selection, implementation, assessment, authorization, and continuous monitoring
- Provide guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, Cloud Computing SRG, and AI-specific guidance
- Conduct security architecture reviews and security engineering analysis for cloud-native and containerized Azure workloads
- Evaluate security controls for Kubernetes, Docker, and container orchestration platforms in Azure
- Assess risks related to generative AI, LLMs, and AI/ML workloads
- Develop and maintain SSPs, SARs, POA&Ms, and related RMF documentation
- Perform threat modeling, vulnerability assessments, and cloud/AI risk analysis
- Collaborate with architects, developers, and DevSecOps teams to integrate security throughout the SDLC
- Support security control assessments and coordinate with third-party assessors
- Monitor, track, and report security compliance posture through Continuous Monitoring processes
Requirements:
- Active Secret security clearance
- Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology
- 5+ years of cybersecurity experience, including RMF activities for Department of War systems
- Security certification such as CompTIA Security+, CISSP, or CISM
- Practical knowledge of cloud platforms, preferably Azure or Google Cloud Platform, including IAM, VPC, GKE, and security services
- Strong knowledge of Docker, Kubernetes, containerized environments, and container security best practices
- Familiarity with generative AI, LLMs, and AI/ML security considerations
- Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and related cybersecurity frameworks
- Experience writing and maintaining SSPs, POA&Ms, and SARs
- Experience with security risk assessments in DoW environments
- Strong communication and collaboration skills
- U.S. citizenship or lawful permanent residency required for employment
Benefits:
- Fully remote work
- Minimal travel
- Equal Opportunity Employer
Similar Jobs
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
Lead Security Engineer
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Staff Cloud Security Engineer
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.
Cybersecurity Co-Founder / CCO
Cybersecurity co-founder owning and scaling a startup with EWOR, a venture builder supporting entrepreneurs through founder coaching, hiring, distribution, and funding.
Infrastructure & Security Engineer
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.