Information Systems Security Officer (ISSO)
21 hours ago
Austin
Job DescriptionSaronic Technologies is a leader in revolutionizing defense autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations for the Department of Defense (DoD) through autonomous and intelligent platforms. Position OverviewWe are seeking an experienced ISSO to lead the stand-up, accreditation, and continuous monitoring of classified networks in support of U.S. Government customers. The ideal candidate has direct, hands-on experience securing Authorities to Operate (ATO) for SIPRNet (DCSA) and JWICS (Navy/IC) environments, with proven expertise managing ATO lifecycles across the DOW, IC, and specific Navy stakeholders. Experience with CWAN and/or enabling Defense Contractors to build compliant, customer-aligned classified enclaves is preferred.This role reports to the Industrial Security Manager and works closely with Cybersecurity, Information Technology, Business Development, and Growth Teams to deliver accredited classified capabilities on time and within scope.Key Responsibilities • Serve as the primary ISSO for SIPRNet (DCSA) and JWICS (Navy/IC) ATO packages, including RMF workflow in eMASS, Xacta, or equivalent., • Lead ATO development, submission, assessment, and authorization with DCSA, Navy AO/DAO, and IC CAFs (e.g., DIA, NSA, NRO).SOCOM-Specific Functions, • Author and maintain USSOCOM 10-702 RMF overlays for SOF-unique systems (e.g., SOFNET, SOF-IA, Mission Command Systems)., • Manage ATO packages under SOCOM’s J6/J39 using eMASS Enterprise and SOCOM’s Risk Management Framework Process Guide., • Coordinate with TSOC ISSMs and Component Command Validators for deployment of classified SOF enclaves worldwide.Navy-Specific Functions, • Interface directly with NAVCYBERFOR, FLTCYBERCOM, and SPAWAR/NAVWAR for CANES, ADNS, and ISNS integration into contractor JWICS drops., • Execute Navy RMF per NAVSEA 9400 series and SECNAV M-5239.2 for ship-to-shore and afloat classified networks., • Manage JWICS ATOs under Navy DAO (OPNAV N2N6), including Type-1 encryption and NSA Commercial Solutions for Classified (CSfC) implementations.SAP/SCI Environment Functions, • Act as SAP ISSO for Special Access Programs (SAP) under DoD SAPCO, Service SAPCOs, and IC SAPCOs., • Participate in the development of SAP Security Plans (SAPSP), Fixed Facility Checklists (FFC), and TEMPEST addendums for SAP facilities., • Oversee SAP network carve-outs, air-gapped systems, and bilateral SAP-to-SCI cross-domain transfers., • Manage classified network stand-up for Defense Contractor facilities, including:, • Design and implementation of secure enclaves (SIPR, JWICS, CWAN, SAP), • Cross-domain solutions (CDS), VTC, and secure voice, • Compliance with ICD 503, JSIG, NISPOM, DAAPM, and CNSSI 1253, • Oversee continuous monitoring, POA&M management, and annual re-accreditation for CWAN-connected systems and/or SAP collateral networks., • Coordinate with Navy SPAWAR, NRO, DISA, SOCOM J6, and IC customers to align technical solutions with mission requirements., • Conduct security audits, vulnerability scans (ACAS), STIG compliance, and incident response for classified systems., • Mentor junior ISSOs and interface with CPSO/FSO on physical, personnel, and COMSEC requirements.Required Qualifications, • 5+ years as ISSO in classified DoD/IC environments (SIPR/JWICS and SAP mandatory)., • Direct experience obtaining and maintaining ATOs with:, • DCSA for SIPRNet, • DOW for JWICS, • CWAN-connected networks, • USSOCOM or SAP AOs for SOF/SAP systems, • Proficiency with RMF, eMASS, Xacta 360, SOCOM 10-702 overlays, and SCAP/STIGs., • Current DoD 8570 IAT/IAM Level III certification (e.g., CISSP, CISM, GSLC)., • Active TS/SCI with Full-Scope Poly (or CI Poly with ability to obtain FS)., • Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience)., • Travel: Occasional (10–15%)Preferred Qualifications, • Prior CWAN and SOCOM SOFNET accreditation and operations experience., • Experience with Navy FLTCYBERCOM, SPAWAR, ONR, or SOCOM J39 classified programs., • Familiarity with CDS (ISSE Guard, Radiant Mercury), CSfC, and secure VTC (SVTC)., • SAP ISSM training (e.g., CDSE SAP Security Management) and ICD 705 SCIF accreditation experience., • Experience supporting Defense Contractors in building customer-dedicated classified networks (e.g., SCIF-in-SCIF, dedicated JWICS/SAP drops).Physical Demands, • Prolonged periods of sitting at a desk and working on a computer, • Occasional standing and walking within the office and production environments, • Manual dexterity to operate a computer keyboard, mouse, and other office equipment, • Visual acuity to read screens, documents, and reports, • Occasional reaching, bending, or stooping, • Lifting and carrying items up to 20 poundsBenefits, • Medical Insurance: Comprehensive health insurance plans covering a range of services, • Dental and Vision Insurance: Coverage for routine dental check-ups, orthodontics, and vision care, • Saronic pays 100% of the premium for employees and 80% for dependents, • Time Off: Generous PTO and Holidays, • Parental Leave: Paid maternity and paternity leave to support new parents, • Competitive Salary: Industry-standard salaries with opportunities for performance-based bonuses, • Retirement Plan: 401(k) plan, • Stock Options: Equity options to give employees a stake in the company’s success, • Life and Disability Insurance: Basic life insurance and short- and long-term disability coverage