Information System Security Manager (ISSM) (Onsite)

Date Posted:

2026-01-27

Country:

United States of America

Location:

US-MD-ANNAPOLIS JUNCTION-339 ~ 306 Sentinel Dr ~ 339 BLDG

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance​

Security Clearance Type:

DoD Clearance: TS/SCI

Security Clearance Status:

Active and existing security clearance required on day 1

Raytheon Company Managed by Collins Aerospace

Applied Signal Technology’s (AST) Security organization is seeking an Information Systems Security Manager (ISSM) who strives for excellence and has a passion to be part of a team that strengthens our nation and improves the security of our world. AST provides trusted strategic and tactical SIGINT solutions that secure the interests of the U.S. and its partners. AST’s work in areas such as high-capacity broadband communications, signal processing and analysis, tactical SIGINT, and wireless communications continually challenge our extraordinary engineers to resolve problems and make the world a safer place. AST’s work environment is passionate, highly collaborative and provides engineers with the freedom to strengthen and expand their skills, explore new and creative ideas, and work closely with our nation’s finest service members all while embracing integrity, innovation, and work-life balance.

As the site ISSM you will own the end-to-end Cybersecurity Program for all classified and controlled information systems at our Maryland Office facility. You will partner with Program Management, Engineering, and the Cognizant Security Agency (DCSA/SAPCO) to obtain and sustain ATO on schedule, manage and mentor a growing ISSO team, and keep our environment audit ready every day.

This is an ONSITE position at our Annapolis Junction, MD Location. To find out more about AST, Applied Signal Technology: WHO WE ARE

What You Will Do:

• Lead RMF/JSIG/DAAPM execution — architect secure solutions, prepare authorization packages, brief Security Control Assessments, and drive POA&M closure.

• Own continuous monitoring — vulnerability & patch management (ACAS/Nessus, SCAP, STIGs), log analysis (Splunk), account management, media control, incident response, and annual self-inspection.

• Shape early program decisions — embed with PMO to define security requirements, supply secure-by-design input at PDR/CDR/TRR, and influence contract CDRLs.

• People leadership & workforce execution — directly manage ISSOs (and matrix/functional support as applicable), including hiring support, onboarding, performance feedback and reviews, coaching/mentorship, training plans, and day-to-day prioritization to ensure mission coverage.

• Develop people & process — coach ISSOs/ISSEs, refine SOPs, track metrics, and present status to senior leadership and customers.

• Interface with external stakeholders — act as the single voice to DCSA, SAPCO, and other Cognizant Security Agencies for all cybersecurity matters.

• Travel up to 10% (domestic)

Qualifications You Must Have:

• Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM), information technology and a minimum of 5 years of prior relevant experience.

• 5 years in DoD/IC Cybersecurity as ISSM or IAM-III equivalent (CISSP, CISM, GSLC).

• Proven delivery of ATO for SAP or SCI systems; prior Enterprise ISSM experience.

• Active and transferable U.S. government issued Top Secret SCI (TS/SCI) security clearance required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer:

• Proven leadership of multi-disciplinary teams and successful ATO delivery for SAP or SCI systems.

• Prior experience as a people manager (direct reports) including staffing, performance management, and employee development; or demonstrated experience leading and developing teams in a senior/lead capacity.

• Expert knowledge of NISPOM (32 CFR 117), JSIG, RMF (NIST 800-37/-53), ICD-503, and DAAPM, oversight/execution of A&A processes.

• Experience with DevSecOps pipelines, Zero Trust architecture, and Identity Access Management.

• Experience executing DISA STIG/SRG hardening across Linux and Windows.

• Background in network/systems security (architecture, topology, protocols, components, principles).

• Hands-on with ACAS, SCAP, STIG Viewer, DISA SRGs, and SI