AISSO III

We need to output HTML fragment with sections for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate. Must preserve all substantive info. We need to parse the job posting. Key content: - Job Title: AISSO III (but we don't repeat as heading) - Clearance Required: Secret; US Citizen. - Work Location: Hybrid; Portsmouth, VA or Kearneysville, WV (onsite as needed to maintain SIPR access) - Description: Alpha Omega is looking for a focused, driven self-starter to work in a highly dynamic, cross-functional, complex IT environment. The Alternate Information System Security Officer (AISSO) will represent the ISSO as the IA liaison to assigned Information Systems (IS), Cloud Systems, Platform Information Technology (PIT), and Platform Information Technology Systems (PITS); the candidate will interface with the ISSO, system stakeholders, and upstream and downstream assessment stakeholders to perform security duties. The AISSO is responsible for helping assigned systems achieve and maintain their Authority to Operate (ATO) or Platform Information Technology Approval (PITA). All supported system missions include supporting national security and search and rescue missions. These systems operate across various technology platforms and environments, including DevSecOps, Cloud, and traditional data centers. The AISSO reports directly to Team Leads and the Project Manager, while independently engaging in enterprise and system-level cybersecurity-related engineering tasks. - The successful candidate should have: experience performing assessment-related tasks; expert verbal and written communication skills; ability to interpret NIST and DoD guidance; and experience with industry tools, such as STIG viewer, ACAS, and eMASS. - Key Responsibilities: list of bullet points. - Education Required Qualifications: Bachelor’s degree or higher in Cybersecurity/IT - Experience/Skills: Five (5) years of related experience; Fully qualified, by qualification standards and requirements in accordance with DoDD 8140.01 and DoDM 8140.03, DCWF Reference 511, 622, 722, Level II/Level III; Experience implementing or assessing DISA STIGs; Experience with RMF workflow; Experience with industry tools, such as STIG viewer, ACAS, and eMASS - Required Certifications (at Least 1 Required): CISM, CISSP, GSLP (maybe GSLP? It says GSLP? Actually "CISMCISSPGSLC" maybe a typo: CISM, CISSP, GSLP? We'll list as CISM, CISSP, GSLP? We'll preserve as given: CISM, CISSP, GSLP? The text: "Required Certifications (at Least 1 Required) CISMCISSPGSLC". Likely they meant CISM, CISSP, GSLP? We'll output as CISM, CISSP, GSLP? We'll keep as "CISM, CISSP, GSLP". Could also be "CISM, CISSP, GSLP"? We'll just list them separated by commas. - Preferred Qualifications: Fully qualified, by qualification standards and requirements in accordance with DoDD 8140.01 and DoDM 8140.03, DCWF Reference 511, 622, 722, Level III; CISSP or CISM certification in good standing; Familiarity with overlays, including CFO, Privacy, Facility, and NSS; Experience and familiarity with DevSecOps principles especially in terms of secure coding best practices; Experience with Cloud-based (FedRAMP) system authorization - Salary And Benefit Information: The likely salary range for this position is $86,000- $110,000. This is not, however, a guarantee of compensation or salary. There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, education and certifications as well as contract provisions regarding labor categories that are specific to the position and could fall outside of this range. - Application Deadline: November 20, 2026 (we should drop application instructions? The instruction says remove application instructions. Application deadline maybe considered application instruction? It's a deadline, but it's part of application instructions. Likely we should drop it. The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should drop Application Deadline. - Benefits: list bullet points. - Company description: About Alpha Omega (we could put under About the role? Actually "About the role" is a section heading we can use for description of role and company? The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have About the role containing description of role and maybe company overview. We'll include the description paragraphs about Alpha Omega under About the role. - Culture And Values: maybe could be part of About the role or separate? Not in list of headings; we could incorporate into About the role. - EEO statement: remove. We need to avoid placeholder text like "commensurate with experience", etc. Not present. We need to include sections only when posting has real specific content. We have content for: - About the role: we have description of role, company, culture, values. - Responsibilities: we have list. - Requirements: maybe combine Education Required Qualifications and Experience/Skills and Required Certifications? The heading "Requirements" could contain education, experience, certifications. - Qualifications: maybe Preferred Qualifications? Could be separate. - Skills: maybe list of skills like expert verbal/written communication, ability to interpret NIST/DoD, experience with tools, etc. Could be separate. - Benefits: we have list. - Pay: we have salary range. - Schedule: not mentioned (Hybrid location but schedule not specified). No schedule info, so we should not create Schedule section. Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay. We must not include empty sections. Now format:

About the role

...

We need to preserve all substantive info. Let's craft About the role paragraph(s) that include: - Alpha Omega looking for focused, driven self-starter to work in highly dynamic, cross-functional, complex IT environment. - The Alternate Information System Security Officer (AISSO) will represent the ISSO as the IA liaison to assigned Information Systems (IS), Cloud Systems, Platform Information Technology (PIT), and Platform Information Technology Systems (PITS); will interface with the ISSO, system stakeholders, upstream/downstream assessment stakeholders to perform security duties. - AISSO responsible for helping assigned systems achieve and maintain ATO or PITA. - All supported system missions include supporting national security and search and rescue missions. - Systems operate across various technology platforms and environments, including DevSecOps, Cloud, and traditional data centers. - AISSO reports directly to Team Leads and the Project Manager, while independently engaging in enterprise and system-level cybersecurity-related engineering tasks. - Clearance Required: Secret; US Citizen. - Work Location: Hybrid; Portsmouth, VA or Kearneysville, WV (onsite as needed to maintain SIPR access). - Company description: Alpha Omega is an award-winning solutions provider dedicated to delivering mission-enabling technology and strategic solutions for customers. Since founding in 2016, grown to over 700 employees nationwide consisting of former operators, technologists, and strategists who bring decades of government and industry experience. United by purpose: ensuring nation’s continued global leadership. Unified operating model providing technical capabilities and solutions for customers across two main business units: National Security – supporting agencies such as DHS, Navy, Air Force, Army, DOS. National Resilience – supporting agencies such as FDIC, Treasury, HHS, NIH, NOAA, USDA. Through strategic partnerships, IP, and relentless drive for innovation, Alpha Omega shaping future of government technology. Proud to be Virginia Best Places to Work 8 times, Inc. 5000 honoree 7 times, Washington Post Top Workplaces 4 times. - Culture And Values: Guided by core values—Harmony, Engagement, Accountability, Resourcefulness, and Tenacity (HEART)— foster culture of innovation, collaboration, continuous learning, committed to delivering high-impact solutions. Recognize and reward hard work. Culture driven by values and mission. Invest in top talent through mentorship, growth, meaningful work. Value individuality, reward integrity, foster diverse, high-performing team united by purpose-at work, in service, and in the community. We'll combine into maybe multiple

tags. Now Responsibilities: list of bullet points from "Key Responsibilities". We'll output

• each. Responsibilities list: - Conduct focused compliance assessments for information systems according to guidance from NIST, OMB, DoD, DHS, FISMA, and internal policies. - Identify common and inheritable security control applicability across a variety of platforms and applications. - Analyze DoD Security Technical Implementation Guides (STIGs) implementation compliance and associate checklists to NIST SP 800-53 security controls. - Conduct comprehensive manual security control testing, document examination, and staff interviews for security controls not covered by STIGs or inheritance. - Analyze scan results from scanning tools (Nessus, SIEM, ACAS, and so forth) to identify additional information system vulnerabilities; verify scans against approved hardware/software and server lists to identify where gaps exist. - Plan, develop, finalize, and review key deliverables at each stage of the Assessment & Authorization (A&A) project using applicable DoD and DHS tools and guidance. - Prepare and track POA&Ms in eMASS for items that are out of compliance; identify risks and remediation recommendations. - Manage project expectations to ensure requirements are understood and agreed upon by stakeholders. - Assess proposed changes to information systems; identify risks of the proposed change and whether the proposed change affects the system ATO or FIPS categorization level. - Develop, review, and reconcile IA security policies, standards, guidelines, procedures, and other technical documentation. - Perform research to ensure knowledge proficiency remains aligned to technologies and industry’s best practices. - Identify and recommend process improvements relating to the A&A process and/or established guidelines. - Work closely with stakeholders to ensure information system A&A efforts are completed within stated deadlines. - Engage constructively within the team to identify and resolve challenges or exploit opportunities. - MUST possess excellent verbal and written communication skills. - MUST be comfortable discussing (both verbally and in writing) status and risks/project impacts with all levels of management and project stakeholders. - Ability to interpret NIST and DoD guidance. - Possess familiarity with FedRAMP inheritable controls and cloud-based security principles. Note: Some of these are also in skills; but we keep as responsibilities. Now Requirements: include Education Required Qualifications, Experience/Skills, Required Certifications. Education: Bachelor’s degree or higher in Cybersecurity/IT Experience/Skills: Five (5) years of related experience; Fully qualified, by qualification standards and requirements in accordance with DoDD 8140.01 and DoDM 8140.03, DCWF Reference 511, 622, 722, Level II/Level III; Experience implementing or assessing DISA STIGs; Experience with RMF workflow; Experience with industry tools, such as STIG viewer, ACAS, and eMASS Required Certifications (at Least 1 Required): CISM, CISSP, GSLP (maybe GSLP? We'll keep as given: