TS/SCI ISSM with Security Clearance

Position: TS/SCI ISSM

Duration: 6-Month contract-to-hire

Location: Hanscom AFB

Pay Range(Dependent upon level): $55-$85/hr Required Skills & Experience

5-10 years of experience performing ISSM or senior ISSO functions supporting DoD or Air Force systems

Bachelor's degree or equivalent experience

Strong hands‑on experience with Risk Management Framework (RMF) and A&A activities

Experience conducting security risk, vulnerability, and security impact assessments

Experience maintaining RMF artifacts (SSP, POA&Ms, SARs, control documentation)

Ability to assess and document security impacts of system changes and configuration updates

Experience supporting continuous monitoring, audits, and compliance reviews

Strong written and verbal communication skills for technical documentation and leadership briefings

Knowledge of cybersecurity policies, NIST publications, and cryptographic fundamentals

Certification: CISSP, CISM, or CGRC (DoDI 8140‑approved, Basic or Intermediate) Nice to Have Skills & Experience

Experience supporting cyber inspections, penetration tests, or external assessments

Experience with Air Force cybersecurity tools and systems (e.g., eMASS, ACAS, STIGs)

Experience participating in CCBs, working groups, and system design reviews

Experience supporting mission‑critical or classified environments (e.g., NC3 or weapons systems)

Prior experience serving as a cybersecurity subject‑matter expert to program leadership Job Description The Information System Security Manager (ISSM) is responsible for ensuring systems and applications comply with National, DoD, and Department of the Air Force cybersecurity requirements. This role leads Risk Management Framework (RMF) activities, assesses security risks and vulnerabilities, evaluates the security impact of system changes, and ensures the confidentiality, integrity, and availability of information systems throughout the system lifecycle. The ISSM works closely with technical teams and leadership to maintain authorization, support continuous monitoring, and uphold system cybersecurity posture.