DirectJobHub
Jobs · Information Technology · Ohio

Cybersecurity Engineer, Senior (ISSM)

Torch Technologies, Inc. · Kettering, OH · 1 mo ago
Information TechnologyFull-time
We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the posting. First paragraph: "Torch Technologies Thank you for your interest..." This is boilerplate intro, but includes description of company. Should we include as About the role? The instruction: "Do NOT repeat the job title as a heading (the heading (the page already shows it)". We can have an "About the role" section summarizing description of role? The posting includes description of role after intro: "Torch Technologies has an exciting opportunity for a Cybersecurity Engineer, Senior (ISSM) located Kettering, OH (Dayton/WPAFB area) to support our EPASS GB contract." Then details about GBBH etc. That's role description. So we can put that under

About the role

with paragraphs. Then responsibilities: bullet list after "As a Cybersecurity Engineer, Senior (ISSM) your duties include, but are not limited to:" followed by many items separated by semicolons. We need to convert each duty into
  • . Should we split by semicolon? The list is long with many items separated by semicolons and some commas. We'll treat each item separated by ; as a list item. Ensure we keep all content. Then Required Qualifications: list of qualifications with bullet-like statements. We'll put under

    Requirements

    or

    Qualifications

    . The instruction says we can use Requirements, Qualifications, Skills. We have Required Qualifications and Preferred Qualifications. We'll combine Required Qualifications under

    Required Qualifications

    maybe but heading must be from list: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can use "Requirements" for required qualifications, and "Preferred Qualifications" maybe under "Qualifications" or "Skills"? Preferred qualifications could go under "Qualifications" heading. We'll put required under

    Requirements

    , preferred under

    Qualifications

    . Skills maybe not separate; we could omit Skills if no specific skills section besides those in qualifications. But we have some skill mentions in responsibilities and qualifications; but we can keep them within those sections. Benefits: there is a Benefits paragraph describing benefits. So

    Benefits

    with
    • items. Schedule: there is "Schedule: M-F; 8 - 5". So we can include

      Schedule

      with

      maybe. Pay: not mentioned; no Pay section. We must not include boilerplate like EEO, application instructions, etc. Remove duplicated lines, cookie/navigation/legal/EEO etc. Also remove "Applying To Torch Technologies" etc. We must preserve all substantive information; do not invent or summarize away detail. So we need to keep all details from responsibilities, qualifications, benefits, schedule. We must not include placeholders like "commensurate with experience". Not present. Now craft HTML. We'll start with

      About the role

      then paragraphs. We need to extract the role description: after intro: "Torch Technologies has an exciting opportunity for a Cybersecurity Engineer, Senior (ISSM) located Kettering, OH (Dayton/WPAFB area) to support our EPASS GB contract. As part of the AFLCMC/GB Business and Enterprise Systems Directorate (BES), the Enterprise Systems Branch currently supports 5 projects/initiatives that include development and sustainment of enterprise information systems. GBBH acquires, deploys, employs and sustains cost efficient and effective IT capabilities and business solutions for the Air Force enterprise. GBBH has been migrating development activities towards an agile, Dev, Sec, Ops methodology, requiring the user community and functional sponsor representatives to be “hands-on” during the development process. It is important that support within GBBH can be leveraged across multiple programs and applications. In-turn, this requires flexibility of GBBH support personnel to be able to work amongst the programs/applications within the GBBH portfolio. Therefore, GBBH dedicated support will be able to work on/charge to a single PID encompassing all GBBH programs/applications." We'll keep that as paragraphs. Now Responsibilities: list items. Let's extract each duty separated by semicolon after colon. The text: "Provide the PMO/Capability Development Manager (CDM) cybersecurity support per DoWI 8500.01 to include assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as Risk Management Framework (RMF), Cybersecurity Framework (CSF), and National Institute of Standards and Technology (NIST) and per Authorization Official’s Information System’s Continuous Monitoring (ISCM) strategy. Serves as the primary cybersecurity technical advisor to the AO, PM and ISO. Ensures the integration of cybersecurity into, and throughout, the lifecycle of the IT, on behalf of the AO and in accordance with DoWI 8510.0. Completes and maintains required cybersecurity certification IAW AFMAN 17-1303; Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals; Supports the PM or ISO in maintaining current authorization to operate, approval to connect (if required), and implementing corrective actions identified in the plan of actions and milestones; Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitors any proposed or actual changes to the system and its environment; Continuously monitors the IT and environment for security-relevant events; Assesses proposed configuration changes for potential impact to the cybersecurity posture; Assesses the quality of security controls implementation against performance indicators; Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected IT; Ensures all ISSOs and privileged users receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, Computer Security (COMPUSEC), AFMAN 17-1303, and maintain proper clearances IAW DoWI 8500.01; and, Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly IAW DoWI 5000.02 and DoWI 8510.01." We need to split by semicolon, but some items have internal semicolons? Not many. We'll just split by ; and treat each as list item, trimming. Let's list: 1. Provide the PMO/Capability Development Manager (CDM) cybersecurity support per DoWI 8500.01 to include assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as Risk Management Framework (RMF), Cybersecurity Framework (CSF), and National Institute of Standards and Technology (NIST) and per Authorization Official’s Information System’s Continuous Monitoring (ISCM) strategy 2. Serves as the primary cybersecurity technical advisor to the AO, PM and ISO 3. Ensures the integration of cybersecurity into, and throughout, the lifecycle of the IT, on behalf of the AO and in accordance with DoWI 8510.0 4. Completes and maintains required cybersecurity certification IAW AFMAN 17-1303 5. Ensures all AF IT cybersecurity-related documentation is current and accessible to properly authorized individuals 6. Supports the PM or ISO in maintaining current authorization to operate, approval to connect (if required), and implementing corrective actions identified in the plan of actions and milestones 7. Coordinates, with the PM and AO staffs, development of an ISCM strategy and monitors any proposed or actual changes to the system and its environment 8. Continuously monitors the IT and environment for security-relevant events 9. Assesses proposed configuration changes for potential impact to the cybersecurity posture 10. Assesses the quality of security controls implementation against performance indicators 11. Ensures cybersecurity-related events or configuration changes that impact AF IT authorization or adversely impact the security posture are formally reported to the AO and other affected parties, such as IOs, stewards, and AOs of interconnected IT 12. Ensures all ISSOs and privileged users receive necessary technical training and obtain cybersecurity certification IAW AFMAN 17-1301, Computer Security (COMPUSEC), AFMAN 17-1303, and maintain proper clearances IAW DoWI 8500.01 13. Ensures the AF IT is acquired, documented, operated, used, maintained, and disposed of properly IAW DoWI 5000.02 and DoWI 8510.01 Note there is an "and," before item 12? We'll keep as is. Now Required Qualifications: The text includes multiple options. We'll capture as paragraphs or list. The Required Qualifications block: "Required Qualifications U.S. Citizenship Master's or Doctorate Degree in a related field and 10 years of experience in the respective technical/professional discipline being performed, five years of which must be in the DoW OR Bachelor's Degree and 12 years of experience in the respective technical/professional discipline being performed, five of which must be in the DoW OR 15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoW. Must have the knowledge, experience and recognized ability to be considered highly skilled in their technical/professional field. Must possess the ability to perform tasks independently and oversee the efforts of junior and journeyman contractor personnel within the technical/professional discipline. Demonstrates advanced knowledge of their technical/professional discipline as well as possess a comprehensive understanding and ability to apply associated standards, procedures and practices in their area of expertise (Program Office, Enterprise and Staff Level Support interface). All Cybersecurity professionals should possess experience providing guidance on the following to include, but not limited to: Access control. Configuration management. System and communications protection. Contingency planning. Incident handling. System and information integrity. Security and privacy training and awareness; and, Software development activities, software and tools related to Cybersecurity. Experience performing cybersecurity duties as outlined in DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT. Experience validating, evaluating and analyzing finding results and developer adjudications using automated testing tools, e.g., Fortify, Checkmarx, SonarQube, and AppScan. Experience utilizing DoW tracking systems to input/document cybersecurity deficiencies, vulnerabilities, and change requests in the appropriate tracking system for each program, e.g., Jira, HP ALM, and eMASS. Experience with conducting information security continuous monitoring (ISCM) by maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions IAW approved ISCM strategy. At a minimum, the successful candidate will meet the requirements for and maintain a personnel certification associated with the DCWF ISSM work role (722) at an advanced (senior) proficiency level as outlined in DoWI 8510.01, AFMAN 17-1305 and AFI 17-101 for assigned systems/applications: ISACA CISM United America Technologies CISSO FITSI FITSP-M GIAC GCIA GIAC GCSA GIAC GCIH GIAC GSLC GIAC GICSP (ISC)2 CISSP-ISSMP (ISC)2 CISSP" We need to preserve all details. We'll format as
      • for each bullet? The block includes sentences and bullet-like items. We'll treat each line starting with a capital letter as separate
      • maybe

    • Similar jobs