Information Systems Security Officer

Job Description

acuCyber is seeking an experienced Information Systems Security Officer (ISSO) to support the Naval Information Warfare Center Atlantic (NIWC Atlantic) Expeditionary Enterprise Systems and Services (E2S2) Division. NIWC Atlantic provides design, acquisition, and sustainment services for Marine Corps Systems Command (MCSC) Information Technology (IT) systems.

 

The ISSO Contractor role will serve as a primary cybersecurity and Risk Management Framework (RMF) specialist, supporting the Portfolio Acquisition Executive Mission Systems (PAE MS) Information Systems Security Manager (ISSM). This position is an Assessment and Authorization (AA) focused role. The ISSO will help guide packages through the RMF process, with the goal of obtaining accreditation by Authority to Operate (ATO) and maintaining continuous monitoring on each package.  

 

Job Responsibilities include:

• Develop, review, and maintain AA documentation including NIST SP 800-53 Rev5 Controls, System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POAM). 
• Gather and upload artifacts, as well as main system information within eMASS. 
• Support setting up, executing, and processing results of important security events including Annual Security Reviews (ASR) and Independent Verification and Validation (IVV). 
• Maintaining system level POAMs on a continuous basis.

 

Location Telework: 

This position requires full-time, on-site performance in North Charleston, SC and may be eligible for a maximum of one (1) day of telework per week, subject to Government and management approval and mission requirements.

, Required Skills
Clearance Required:

Active U.S. Government Top Secret security clearance

 

Education Experience: 

• Must meet one of the following tracks:
  • A Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, Electronics Engineering, Mathematics (with a CS concentration), or equivalent, PLUS 3+ years of experience in cybersecurity policy and Assessment Authorization (AA) compliance.
  • High School diploma, GED, trade school graduate, or 4 years of equivalent military service, PLUS 10+ years of professional technical problem-solving experience.
    
    Core Technical Requirements (Required for both tracks):
  • Direct experience preparing, implementing, and ensuring compliance with cybersecurity policies and AA requirements.
  • A strong practical foundation in engineering, software lifecycle maintenance, and fabrication methodologies.

 

Certification Requirements:

• Individual shall be certified as Information Assurance Management (IAM) or Information Assurance Technical (IAT) or Information Assurance System Architect and Engineer (IASAE) Level I (position-based) per DoD 8570.1M

 

Technical Skills:

• Extensive experience drafting system security plans (SSPs), executing continuous monitoring strategies, and defending packages directly to the Navy Authorizing Official (AO) or functional Security Control Assessor (SCA).
• Comprehensive experience managing the full Assessment Authorization (AA) lifecycle, including preparing and maintaining DoD RMF accreditation packages in strict compliance with DoDI 8510.01, NIST SP 800-53 Rev 5, CNSSI 1253, and ICD 503.
• Hands-on experience utilizing automated tools such as eMASS and/or MCCAST to govern accreditation packages and navigate complex system workflows.
• Demonstrated expertise in documenting, analyzing, and remediating system vulnerabilities in accordance with Information Assurance Vulnerability Management (IAVM) notices and DISA Security Technical Implementation Guides (STIGs).

, Desired Skills
Government Compliance:

• DoD/IC Experience: Experience supporting DoD, Intelligence Community, or classified government systems.
• RMF Expertise: Demonstrated experience engineering NIST RMF controls and producing RMF artifacts.

 

Security Architecture Engineering:

• Secure Systems Design: Strong understanding of secure systems engineering, defense-in-depth, Zero Trust architectures, and large-scale distributed systems.
• Core Technologies: Experience with operating systems, networking, virtualization, cloud, IAM, encryption, and cybersecurity technologies.
• Vulnerability Management: Experience conducting vulnerability assessments using ACAS, Nessus, SCAP, or similar tools.

 

Professional Skills Certifications:

• Certifications: Active security certifications (e.g., Security+, CISSP, CASP+, CCSP, GIAC, or IASAE).
• Communication: Strong technical writing and verbal skills to convey complex cybersecurity concepts to both technical and leadership audiences.

, About acuCyber

At acuCyber, cleared tech talent fuels the future of national defense. As a respected and fast-growing player in the DoD and federal contracting space, we deliver advanced cybersecurity and digital solutions that protect vital systems and drive mission success. Our team of cleared engineers, developers, and cyber experts work hands-on with secure environments, and zero-trust architecture. In return, you’ll join a mission-first culture with real growth opportunities and solid benefits: competitive health coverage, 401(k), PTO, short-term disability, and more. If you’re ready to level up your skills and contribute to projects with purpose, acuCyber is where your clearance counts.