We are seeking an Information Systems Security Manager to join our high-performance team supporting a Navy project with the Naval Information Warfare Center Atlantic (NIWC Atlantic). This individual will be responsible for coordinating cybersecurity activities, managing security documentation, and working with Government stakeholders and technical teams to identify and address system risks.

The ideal candidate combines management and compliance experience with a practical understanding of system vulnerabilities, penetration testing tools, and adversary behavior.

Key Responsibilities

• Manage and coordinate cybersecurity activities supporting Navy information systems throughout their lifecycle.

• Support Risk Management Framework (RMF) activities, security control implementation, assessment preparation, and authorization package maintenance.

• Develop and maintain cybersecurity policies, procedures, system security plans, and supporting documentation.

• Coordinate with Government cybersecurity leadership, system owners, Information Systems Security Officers (ISSOs), engineers, and assessment teams to address security requirements and risks.

• Track vulnerabilities, assessment findings, and Plans of Action and Milestones (POA&Ms), and coordinate remediation with responsible technical teams.

• Review vulnerability and penetration testing results, evaluate potential mission impacts, and support mitigation recommendations.

• Apply knowledge of penetration testing tools and threat behavior to help evaluate security controls and identify weaknesses.

• Support continuous monitoring, configuration management, incident response coordination, and cybersecurity reporting.

• Communicate system security posture, outstanding risks, and remediation status to Government stakeholders.

• High school diploma or GED

• TS/SCI DoD Security Clearance

• At least three years of computerized system experience, including:

• o Test and evaluation.

o Network protocols.

o Local area network (LAN) administration fundamentals.

o UNIX- and Windows-based operating systems.

• Demonstrated experience using penetration testing tools and mimicking threat behavior.

• Must be working toward at least one of the certifications listed below within one year after assuming duties:

o Offensive Security Certified Professional (OSCP).

o Offensive Security Certified Expert (OSCE).

o Offensive Security Exploitation Expert (OSEE).

o Offensive Security Exploit Developer (OSED).

o Offensive Security Experienced Pentester (OSEP).

o Offensive Security Wireless Professional (OSWP).

o Offensive Security Web Expert (OSWE).

o Hack The Box Certified Penetration Testing Specialist (HTB CPTS).

o Hack The Box Certified Bug Bounty Hunter (HTB CBBH).

o Certified Red Team Operator (CRTO) from Zero Point Security.

o Certified Red Team Lead (CRTL) from Zero Point Security.

o Practical Network Penetration Tester (PNPT).

o GIAC Red Team Professional (GRTP).

o GIAC Experienced Penetration Tester (GX-PT).

o GIAC Exploit Researcher and Advanced Penetration Tester (GXPN).

• Experience serving as an ISSM, ISSO, or cybersecurity lead supporting Navy or other Department of Defense systems.

• Experience with RMF, authorization to operate (ATO) packages, and the Enterprise Mission Assurance Support Service (eMASS).

• Experience with the Assured Compliance Assessment Solution (ACAS), Security Technical Implementation Guides (STIGs), vulnerability analysis, and remediation tracking.

• Experience translating penetration testing findings into corrective actions and risk recommendations.

• Strong technical writing, coordination, and communication skills.

acuCyber is an Equal Opportunity Employer. We do not discriminate based on race, color, religion, sex, national origin, age, disability, veteran status, or any other protected status.