Information System Security Officer – ISSO

Applied Research Solutions

. Assist in developing and security hardening a DevSecOps cloud environment aligned with DoD RMF and CMMC 2.0 requirements .

Posted 10/26/2026full-timeRemote • Ohio • United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and securing DevSecOps cloud environments, ensuring compliance with DoD RMF and CMMC 2.0 requirements. Proficient in risk assessments, vulnerability management, and fostering a strong security culture within engineering teams.

Highest-signal resume keywords

DevSecOps PracticesAzure Security ToolsDoD RMF ComplianceCMMC 2.0 ImplementationVulnerability Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity EngineeringRisk AssessmentVulnerability TestingSecurity Policy DevelopmentContinuous Monitoring

Soft Skills

CollaborationCommunicationStakeholder Management

Tools & Technologies

Microsoft DefenderAzure SentinelAzure PurviewAzure Policy

Certifications & Qualifications

Secret Security Clearance

Industry Keywords

DoDNIST SP 800-53 Rev. 5CMMC 2.0Security ArtifactsThreat Intelligence

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Assist in developing and security hardening a DevSecOps cloud environment aligned with DoD RMF and CMMC 2.0 requirements
Support cybersecurity governance and compliance for a DoD DevSecOps environment on an Azure-based cloud backbone
Oversee the full lifecycle of Assessment and Authorization activities
Maintain continuous Authority to Operate compliance
Ensure accuracy, completeness, and integrity of security artifacts in eMASS
Develop, implement, and enforce cybersecurity policies and procedures
Monitor control inheritance and system boundary changes
Conduct risk assessments and vulnerability testing
Guide engineering teams in aligning configurations with RMF controls, Zero Trust principles, and DoD Cloud SRG requirements
Serve as primary liaison to government stakeholders, authorizing officials, mission partners, auditors, and engineering teams
Facilitate security briefings and coordinate remediation activities
Collaborate with development and operations teams and promote a strong security culture
Monitor and respond to security incidents and threats
Manage security audits and assessments
Develop and deliver security awareness training
Maintain working relationships with the ISO, AO, SCA, and other IS ISSOs
Stay current with security trends and technologies
Perform other duties as assigned

Requirements

What you’ll need

Must be a US citizen
Bachelor’s degree in cybersecurity, computer science, engineering, or related field (or equivalent experience)
2+ years of cybersecurity engineering experience, preferably supporting DoD, federal, or regulated environments
Must have a Secret security clearance at minimum
Hands-on experience with Azure security tools, including Microsoft Defender suite, Sentinel, Purview, and Azure Policy
Strong knowledge of DevSecOps practices, CI/CD pipelines, and integrating security automation into development workflows
Deep understanding of DoD RMF, NIST SP 800-53 Rev. 5 controls, and security assessment/evidence requirements
Experience implementing CMMC 2.0 or NIST SP 800-171 controls, including documentation, continuous monitoring, and audit readiness
Proficiency in vulnerability management tools, remediation processes, and risk-based prioritization
Familiarity with threat intelligence platforms, adversary TTP analysis, and building threat-informed security detections
Subject to successful background investigation, including criminal history and identity check

Benefits

Comp & perks

Industry competitive benefits package
Awards and recognition program
Personalized attention from ARS Senior Managers
Work/life balance
Career development support and opportunities
Employee-focused culture