Classified Cyber Security Sr - E3

About the role

Standard Job Description The Work: Responsibilities This Information System Security Officer (ISSO) position will support the Information System Security Manager (ISSM) in developing, maintaining and overseeing the cybersecurity of assigned classified and/or unclassified F-35 systems at Nellis Air Force Base. The position is 100% on-site, at Nellis Air Force Base.

Responsibilities

• Ensuring required cybersecurity controls are implemented and validated, to include continuous monitoring actions for assigned systems.
• Supporting the development and maintenance of cybersecurity related plans and procedures.
• Monitoring for non-compliance, anomalous activity (i.e., threats), and effectively reporting such activity and associated risks.
• Ensuring POA&Ms or remediation plans are in place for vulnerabilities identified during monitoring activity, audits, inspections, etc. and implementing, or overseeing, corrective actions.
• Creating, collecting and retaining data to meet reporting requirements.
• Monitoring and correlating data (i.e., events) from a variety of sources (e.g., Splunk, ELA, ePO, ACAS, etc.) to identify and mitigate threats, vulnerabilities and non-compliance.
• Investigating, analyzing and responding to cyber events, incidents and non-compliance, including trend analysis, creating detailed written reports and briefing the appropriate parties.
• Identifying, implementing and enforcing requirements for the proper handling and storage of Government data and electronic media.
• Conducting self-inspections and preparing for customer inspections.
• Interacting professionally during the enforcement of security policy and procedures.
• Assigned systems may vary in classification, capabilities and complexity.
• Mission requirements may require other than first-shift work and additional responsibilities as assigned.
• Ensure compliance to governing documents and security policies and assist in regulatory periodic assessments.
• Implements and tests state-of-the-art secure operating systems, networks, and database solutions.
• Stays current with system vulnerabilities and provides current security training to all system users.
• Conducts risk assessments and provides recommendations for secure implementation and compliance in accordance with government regulations and information assurance/cybersecurity guidelines.
• Creates, maintains and submits information system security documents and reports to regulatory agencies.
• Assesses and mitigates system security threats/risks throughout the program life cycle.
• Validates system security requirements definition and analysis; establishes system security documentation; assists with the implementation of security procedures.

Qualifications

• Final Transferable Secret security clearance; last Periodic Reinvestigation must be within the last five (5) years or enrollment in Continuous Vetting program.
• Ability to obtain and maintain Special Access Program (SAP) access.
• Possess a valid certification that meets or exceeds DoD 8570.01-M IAT II requirements.
  • Meets: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP
  • Exceeds: SecurityX, CCNP Security, CISA, CISSP (or Assc), GCED, GCIH, CCSP
• Prior experience in a cyber workforce role, as categorized by the NICE or Do