Lead RMF/C&A and ATO efforts for DoD systems: prepare and maintain authorization documentation, assess and implement security controls, ensure continuous monitoring and compliance, develop policies and training, coordinate cybersecurity activities, support audits and configuration management, and provide guidance to technical staff and stakeholders.
Saalex is seeking a Senior Information Systems Security Officer (ISSO) in Camarillo/Naval Air Station Point Mugu, CA to support cybersecurity, Risk Management Framework (RMF), and Certification & Accreditation (C&A) activities. The selected candidate will serve as a key cybersecurity resource responsible for supporting system authorization efforts, maintaining security compliance, implementing information assurance policies, and ensuring systems maintain Authority to Operate (ATO) status. This position requires a strong understanding of RMF, cybersecurity compliance, system accreditation, and DoD information assurance requirements.
Position Type: Full-Time
Salary: $145k - $180k annually (depending on experience)
Work Location: Onsite – NAS Point Mugu, CA
Essential Functions:
- Serve as the Sr. Information Systems Security Officer (ISSO) supporting Certification & Accreditation (C&A) activities for multiple systems and programs.
- Prepare, maintain, submit, and update RMF and accreditation documentation required to achieve and maintain system authorization.
- Support Authority to Operate (ATO) efforts and continuous monitoring activities throughout the system lifecycle.
- Ensure implementation of security policies, procedures, and controls established by the Information Systems Security Manager (ISSM).
- Maintain knowledge of current information assurance, cybersecurity, and RMF requirements, policies, directives, and emerging technologies.
- Assess information systems and operating environments to ensure compliance with applicable security requirements.
- Support security control implementation, assessment, remediation, and documentation activities.
- Assist with the development and maintenance of system security documentation, policies, procedures, and compliance artifacts.
- Conduct management studies and evaluations focused on cybersecurity compliance and procedural effectiveness.
- Develop division-level policies and procedures to ensure compliance with DoD and organizational cybersecurity requirements.
- Coordinate required cybersecurity activities, milestones, reviews, and compliance efforts to ensure timely execution.
- Provide cybersecurity guidance and recommendations to technical staff, management, and government stakeholders.
- Deliver security awareness and cybersecurity-related training to assigned personnel.
- Review technical documentation, contracts, reports, and program deliverables for security and compliance requirements.
- Support configuration management processes and ensure documentation complies with applicable organizational standards.
- Perform technical research and complex information gathering activities in support of cybersecurity initiatives.
- Attend conferences, training sessions, and professional development activities to maintain technical proficiency.
- Other duties as assigned or required.
Requirements
Required:
- Minimum of 10 years of relevant cybersecurity, information assurance, RMF, or Certification & Accreditation experience.
- Must hold one of the following certifications:
- CISSP
- CASP+
- CompTIA Security+
- CEH
- Equivalent DoD 8140/8570-compliant Information Assurance certification
- Strong knowledge of the NIST Risk Management Framework (RMF) and system authorization lifecycle.
- Experience implementing, assessing, and maintaining security controls in accordance with federal and DoD requirements.
- Working knowledge of security control baselines, system security documentation, and continuous monitoring requirements.
- Experience supporting Authority to Operate (ATO) efforts and system accreditation activities.
- Knowledge of information systems technologies, including networks, operating systems, processing platforms, and enterprise environments.
- Experience supporting Windows, UNIX/Linux, and other operating system environments.
Desired:
- Experience developing RMF accreditation packages and authorization documentation.
- Experience supporting Navy, NAVAIR, or other DoD cybersecurity programs.
- Experience serving as an ISSO, ISSM, Information Assurance Manager (IAM), or Information Assurance Officer (IAO).
- Experience supporting cybersecurity inspections, audits, and security assessments.
- Familiarity with eMASS and DoD cybersecurity compliance tools.
- Experience developing cybersecurity policies, procedures, and training materials.
Education:
High School Diploma or GED required. Additional technical education or cybersecurity-related coursework preferred.
Security Clearance:
Active Top Secret clearance required with the ability to obtain Special Access Program (SAP) access. Requirements to obtain a clearance include US Citizenship, security investigation, etc.
Benefits
- Employer Paid Health Care Plans for Employees & Family
- Retirement Plan (401k, IRA)
- Life Insurance (Basic, Voluntary & AD&D)
- Paid Time Off (Vacation, Sick & Public Holidays)
- Short Term & Long Term Disability
- Training & Development
- Wellness Resources
- Stock Option Benefit
Similar Jobs
Security
Supports cybersecurity compliance for mission-critical IT systems by managing RMF artifacts, implementing NIST security controls, supporting A&A and ATO activities, conducting risk and vulnerability assessments, and enforcing DISA STIG hardening. Performs continuous monitoring with security tools, supports incident response and forensic analysis, delivers security awareness training, and prepares risk reports and leadership briefings. Requires on-site work, an active TS/SCI clearance, U.S. citizenship, and ability to obtain TS/SCI with polygraph.
Top Skills:
AcasActive DirectoryAuthority To Operate (Ato)Cis BenchmarksDisa StigsDod 8510.01FirewallsIpsecMs Sql ServerNessusNist 800-53NutanixPkiPoa&MsQualysRed Hat Enterprise Linux (Rhel)Risk Management Framework (Rmf)SIEMSolarwindsSplunkSystem Security Plans (Ssps)Tcp/IpVlansVMwareWindows Server
Aerospace • Defense
Oversee cybersecurity compliance, assessments, and operations for classified information systems. Conduct recurring reviews, approve configuration changes, implement security processes and tools, maintain cybersecurity documentation, and mentor ISSOs. Provide technical guidance across programs and represent cybersecurity teams to external stakeholders. The role requires onsite work in El Segundo and intermittent travel to other Raytheon locations.
Top Skills:
AcasDisa StigsForcepointHbssIvantiLinuxNist Special PublicationsRisk Management FrameworkSplunkTenableWindows
Aerospace
Own full-cycle recruiting for engineering, technical, and business roles, including sourcing, candidate screening, interview coordination, offer support, pipeline reporting, and candidate communications. Partner with hiring managers to define requirements and hiring strategies, build passive-candidate pipelines, and improve recruiting processes. The role is fully onsite in Torrance, California and requires U.S. citizenship.
Top Skills:
Applicant Tracking Systems (Ats)GreenhouseLinkedin Recruiter
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
