Advisory Information Systems Security Officer (ISSO)

Responsibilities

• Implements and enforce all AF cybersecurity policies, procedures, and countermeasures.
• Completes and maintains required cybersecurity certification IAW AFMAN 17-1303.
• Ensure all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to IT according to AFMAN 17-1301.
• Maintains all authorized user access control documentation IAW the applicable AF Records Information Management System.
• Leverage ACAS, Nessus, and Tenable solutions to support continuous monitoring, vulnerability management, and RMF compliance.
• Ensures software, hardware, and firmware comply with appropriate security configuration guidelines (e.g., security technical implementation guides /security requirement guides).
• Ensures proper configuration management procedures are followed prior to implementation and contingent upon necessary approval.
• Coincide changes or modifications with the system-level ISSM, SCA, and/or the Wing Cybersecurity office.
• Initiate protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered.
• Reports security incidents or vulnerabilities to the system-level ISSM and wing cybersecurity office according to AFI 17-203, Cyber Incident Handling.
• Initiates exceptions, deviations, or waivers to cybersecurity requirement.

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, Mathematics or a related technical field is desired.
• 6+ years of relevant experience.
• Top Secret/SCI clearance required.
• Sec+ required.
• Experience with ATO process and submitting packages in eMASS / Xacta.
• Understanding of Risk Management Framework (RMF) and DoD / IC cybersecurity requirements, policies and best practices.
• Understanding of configuration management and change control processes.
• Experience with IT Security including requirements, architecture and design.
• Knowledge of security assessment and authorization (A&A) processes.
• Understanding of continuous monitoring, POA&M tracking, and risk scoring.
• Redhat/Linux experience is highly desired.

Pay

The compensation range for candidates in Colorado is $120,000 - $165,000. Starting pay will be based on a number of factors and commensurate with qualifications & experience. FTI has a location-based compensation structure; there may be a different range for candidates in other locations.