Information Systems Security Officer – EW&C

MAG Aerospace

. Own the RMF package end to end, including SSP, security controls, POA&M, artifacts, and continuous monitoring .

Posted 10/16/2026full-timeAberdeen Proving Ground • Maryland • United StatesSeniorLead💰 $130,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Risk Management Framework (RMF) execution, including Security Control Assessment and continuous monitoring, while providing risk mitigation recommendations. Proficient in integrating cybersecurity practices across various systems and managing compliance with DoD standards.

Highest-signal resume keywords

RMF Package OwnershipDoD Cybersecurity ExperienceCISSP CertificationNIST SP 800-53 KnowledgeAI Tools Utilization

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management Framework (RMF)Security Control Assessment (SCA)Continuous MonitoringVulnerability ManagementSTIG ManagementEMASS Package OwnershipConfiguration BaselinesRisk Mitigation RecommendationsCybersecurity AssessmentsDevelopmental Testing

Soft Skills

Stakeholder CommunicationAssessment IndependenceAdvisory Skills

Tools & Technologies

ACASNessusAI ToolsVTC TechnologySCAP

Certifications & Qualifications

DoD 8140 / 8570 IAM Level IICISSPCISMCAPCASP+

Industry Keywords

DoD CybersecurityNIPRSIPRRF SystemsModern Web ArchitecturesDD254Contractor Personnel SecurityResidual RiskAuthorization DecisionIATT versus ATO

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own the RMF package end to end, including SSP, security controls, POA&M, artifacts, and continuous monitoring
Drive IATT for developmental testing and ATO for operational use
Manage STIGs, vulnerability management, SCAP, ACAS/Nessus or equivalent, and configuration baselines
Review scans and distinguish false positives from genuine findings
Advise the Government Project Officer on residual risk, fielding impact, and remediation recommendations
Coordinate with the AO, SCA/SCA-V, ISSM, and system owners
Prepare assessments while maintaining assessment independence
Integrate cybersecurity into system integration, testing, and fielding
Support FCL sponsorship, DD254, and contractor personnel security requirements
Travel when physical presence changes the assessment and brief stakeholders by VTC
Use AI to map controls, draft SSP language, summarize STIG results, and build assessment checklists
Sign the residual-risk memo
Report directly to the Government Project Officer
Support cybersecurity across NIPR, SIPR, RF systems, and modern web architectures for Spectrum Core and PM EW&C

Requirements

What you’ll need

Minimum 5 years experience
8+ years DoW/DoD cybersecurity experience with hands-on ISSO or equivalent RMF execution
DoD 8140 / 8570 IAM Level II or Level III
CISSP, CISM, CAP, or CASP+ preferred
Demonstrated eMASS or equivalent package ownership through an authorization decision
Working knowledge of NIST SP 800-53, CNSSI 1253, STIGs, continuous monitoring, and IATT versus ATO
Ability to provide technically grounded risk and mitigation recommendations
Experience using AI tools to accelerate cybersecurity work and provide a redacted example
Bachelor's degree in Engineering, Computer Science, or related field preferred
4 years of experience may be substituted for a B.S. degree
Ability to meet physical and medical requirements as needed by the position
Secret clearance required; Top Secret clearance preferred

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance