Information System Security Officer

HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide.

About the role

HX5 is currently seeking a qualified Information System Security Officer in support of the Aerospace Dominance Enabler Division at Hill Air Force Base in Ogden, UT.

Responsibilities

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need-to-know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.

Requirements

• Must have one of the following combinations of education and experience:
  • Master’s degree or Bachelor's degree and three (3) years of directly related experience, three (3) of which must be in the DoD.
  • Seven (7) years of directly related experience, five (5) of which must be in the DoD.
• DoD 8570 compliant IAT II certification, such as CompTIA Security+, CompTIA Cloud+, or Security Leadership Certification (GSLC).
• Must maintain required cybersecurity certifications in accordance with AFMAN 17-1303.
• Proof of U.S. Citizenship or U.S. Permanent Residency.
• Must be able to complete a U.S. government background investigation.
• Must be able to obtain a Secret clearance.
• Must be able to travel, including air travel.

Qualifications

• Preferred certifications: CISSP or equivalent.

Skills

• Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance.
• Experience using eMASS for authorization packages, artifact management, and accreditation support.
• Vulnerability assessment and risk mitigation analysis.
• STIG/SRG implementation and configuration management.
• Security audits, assessments, and incident response support.
• Information system security and operational security posture management.
• Secure system and network design support in DoD environments.
• Ability to develop innovative approaches to complex problems.
• Strong attention to quality, adequacy, and completeness of results and conclusions.
• Ability to deliver thorough, timely, and efficient task execution.
• Ability to provide clear analysis and recommendations to program leadership.

Schedule

This is a full-time position requiring 40 hours per week and offers a flexible work schedule Monday through Friday during core business hours.

Benefits

• Medical/Dental/Vision Insurance
• 401(k) plan with Company Match
• Paid Holidays
• Paid Time Off
• Parental Leave
• Life Insurance
• Tuition Reimbursement
• Medical and Dependent Care Flexible Spending Accounts
• Pet Insurance