FishEye Software is seeking an experienced Information System Security Manager (ISSM) to oversee the security and compliance of classified information systems and Controlled Unclassified Information (CUI) environments. This role combines cybersecurity compliance, hands-on IT security administration, and security policy management to support DoD requirements, including the Risk Management Framework (RMF), NIST SP 800-53, NIST SP 800-171, and CMMC Level 2.
You will work closely with FishEye leadership, government agencies, partners, and internal IT and engineering teams to manage cybersecurity risks, maintain secure systems, and support security assessments and authorization activities.
This position requires U.S. Citizenship and an active Secret Security Clearance. Key Responsibilities - Develop, implement, and maintain information system security policies, procedures, technical safeguards, and compliance processes for classified systems and CUI environments.
- Maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), access records, and supporting security documentation and compliance evidence.
- Implement, monitor, and assess security controls in accordance with RMF, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, and applicable DoD requirements.
- Coordinate with DCSA, Security Control Assessors (SCAs), and other stakeholders on security assessments, authorization activities, compliance reviews, and remediation.
- Advise leadership on cybersecurity risks, security priorities, and improvement initiatives.
- Administer and monitor Microsoft 365 environments, including GCC High, Entra ID, Exchange Online, Teams, and SharePoint. Review Conditional Access policies, multifactor authentication (MFA), privileged roles, and security configurations.
- Manage user onboarding and offboarding, account permissions, privileged access, and periodic access reviews.
- Oversee classified information handling, media control, labeling, malware scanning, secure data transfers, and configuration management.
- Work with IT teams to secure Windows, Active Directory, and Linux systems through system hardening, patch management, access controls, vulnerability management, and remediation.
- Coordinate security monitoring and incident response; investigate vulnerabilities and misconfigurations and track corrective actions.
- Oversee application security testing and coordinate remediation with developers.
- Coordinate cybersecurity awareness and user training covering phishing, acceptable use, and CUI protection.
Required Skills and Qualifications - U.S. Citizenship and an active DoD Secret Clearance.
- Bachelor's degree and at least four years of relevant experience, or an equivalent combination of education, experience, and industry certifications (e.g., Security+, CISSP, CISM).
- Current CompTIA Security+ certification or higher for IAM Level I, with the ability to obtain IAM Level II qualification.
- Knowledge of RMF, NIST SP 800-53, NIST SP 800-171, CMMC Level 2, and applicable DoD cybersecurity requirements.
- Experience supporting classified systems, DCSA reviews, security assessments, or system authorization processes.
- Experience administering Microsoft 365, including GCC High, Entra ID, Exchange Online, Teams, and SharePoint.
- Proficiency in access control, security documentation, auditing tools, secure data transfer methods, and system hardening.
- Strong communication, documentation, organizational, and interpersonal skills.
Preferred Qualifications - IAM Level II certification, such as CISSP, CISM or equivalent
- Experience securing Windows, Active Directory, and Linux systems using DISA STIGs and CIS Benchmarks
- Experience with secure software development, application security testing, or cybersecurity training programs.
FishEye Software is proud to be recognized as one of the Boston Globe's Top Places to Work 2025. We offer a comprehensive benefits package featuring medical, dental, and vision insurance; short and long-term disability; life insurance; paid vacation, sick leave and holidays; and a 401(k) plan with company match - plus many additional exceptional perks!
The annual salary range for this position is $ 85,000 - $160,000 USD. The final salary will be determined based on the selected candidate's education, experience, skills, certifications, and other relevant qualifications, as well as applicable client or government contractual rates.
This position requires eligibility to obtain a DOD Secret Security Clearance; ship is required. For more information visit the
FishEye's passion is building and supporting mission critical software and providing real time access to mission critical data. Come as you are, we welcome all applicants.
FishEye Software, Inc. is an Affirmative Action and Equal Opportunity Employer, including the disabled and veterans, and participates in E-Verify. For information about our EOE and AAP programs visit .
* Please Note: FishEye does not accept applications from agencies, 3rd party vendors, or applications with incomplete information.
FishEye Software may conduct background checks, criminal background investigation, and/or security clearance investigation through 3rd party organizations.
