Information Systems Security Officer (ISSO) – Cloud

TDI (Tetrad Digital Integrity)

Cloud ISSO securing U.S. Marine Corps workloads for TDI, a cybersecurity firm.

Posted 8/12/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSenior💰 $130,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Risk Management Framework (RMF) activities, cloud security policies, and security assessments for cloud-native environments. Proficient in developing and maintaining security documentation and integrating security practices within the software development lifecycle.

Highest-signal resume keywords

Active Secret Security Clearance5+ Years Cybersecurity ExperienceNIST SP 800-53 KnowledgeSecurity Certifications (CompTIA Security+, CISSP, CISM)Cloud Platform Experience (Azure or GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk Management Framework (RMF)Security Architecture ReviewsThreat ModelingVulnerability AssessmentsCloud Security ComplianceContainer Security Best PracticesSecurity Control AssessmentsSecurity Documentation (SSPs, SARs, POA&Ms)AI/ML Security ConsiderationsSecurity Risk Assessments

Soft Skills

Strong Communication SkillsCollaboration Skills

Tools & Technologies

AzureDockerKubernetesCloud Computing SRGDevSecOpsXactaEMASSOpenRMF

Certifications & Qualifications

CompTIA Security+CISSPCISM

Industry Keywords

DoD RMFFedRAMPContinuous MonitoringGenerative AILarge Language Models (LLMs)

Tech Stack

Tools & technologies

AzureCloudCyber SecurityDockerGoogle Cloud PlatformKubernetesSDLC

About the role

Key responsibilities & impact

Lead and support RMF activities throughout categorization, control selection, implementation, assessment, authorization, and continuous monitoring
Provide guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, Cloud Computing SRG, and AI-specific guidance
Conduct security architecture reviews and security engineering analysis for cloud-native and containerized Azure workloads
Evaluate security controls for Kubernetes, Docker, and container orchestration platforms in Azure
Assess risks related to generative AI, LLMs, and AI/ML workloads
Develop and maintain SSPs, SARs, POA&Ms, and related RMF documentation
Perform threat modeling, vulnerability assessments, and cloud and AI risk analysis
Integrate security throughout the SDLC with architects, developers, and DevSecOps teams
Support security control assessments and coordinate with third-party assessors
Monitor, track, and report security compliance posture through Continuous Monitoring processes

Requirements

What you’ll need

Active Secret security clearance
Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology
5+ years of cybersecurity experience, including RMF activities for DoW systems
Security certifications such as CompTIA Security+, CISSP, or CISM
Practical knowledge of cloud platforms, preferably Azure or GCP, including IAM, VPC, GKE, and security services
Strong knowledge of Docker, Kubernetes, containerized environments, and container security best practices
Familiarity with generative AI, LLMs, and AI/ML security considerations
Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and relevant cybersecurity frameworks
Experience writing and maintaining SSPs, POA&Ms, SARs, and other RMF artifacts
Experience with security risk assessments in DoW environments
Strong communication and collaboration skills
U.S. citizenship or lawful permanent resident status, due to federal government employment restrictions
Preferred: advanced cloud security certifications
Preferred: experience integrating DevSecOps pipelines with RMF compliance processes
Preferred: familiarity with Xacta, eMASS, or OpenRMF

Benefits

Comp & perks

Fully remote work
Minimal travel
Equal opportunity employment