Information System Security Officer
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content.
We need to preserve all substantive info, remove boilerplate like EEO, application instructions, cookie/navigation, etc. Also remove duplicated lines.
We need to decide sections: About the role: likely the introductory paragraph(s) describing role and mission. Responsibilities: list of duties. Requirements: maybe required qualifications? Qualifications: maybe education/experience? Skills: maybe firewall experience, ability to implement system security measures, understanding of RMF etc. Benefits: not mentioned. Pay: not mentioned. Schedule: not mentioned. So we will include About the role, Responsibilities, Requirements, Qualifications, Skills. Possibly also Clearance? Could be part of Requirements. We'll include Clearance under Requirements or Qualifications? The posting lists "Clearance Required Department of Defense TS/SCI". That's a requirement. We'll put under Requirements.
We need to avoid repeating job title as heading. So no heading for Senior Information System Security Officer.
We need to use - for any list of duties/requirements/benefits. For prose use
.
We need to preserve all substantive info; do not invent or summarize away detail. So we need to include all details from the posting.
Let's extract content.
First paragraph: "The Senior Information System Security Officer (ISSO) supports the Information System Security Manager (ISSM) in protecting and accrediting mission-critical Air Force and Department of Defense information systems. This position conducts cybersecurity research and analysis, develops Risk Management Framework (RMF) and Cross Domain Solution accreditation documentation, evaluates network architectures and security exception requests, and implements applicable DoD, DISA, CSSP, USCENTCOM, and Authorizing Official requirements. The Senior ISSO also maintains security records and approved-product libraries, tracks and reports security events, interprets information assurance policies, and provides IT management, reporting, briefing, training, and CONUS/OCONUS travel support as required."
Second paragraph: "AFCENT’s mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT’s theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission."
Third paragraph: "Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com ."
Then "Submit your resume today!" is application instruction, remove.
Then "Job Responsibilities" heading then list.
List items:
- Assist the ISSM by conducting research, analysis, and creating documentation in support of the RMF process.
- Analyze, evaluate and recommend the application of Air Force systems accreditation and certification procedures for existing and planned network architectures.
- Research, process and recommend approval of Firewall and Bluecoat Exception Requests.
- Process requests for removable media.
- Complete accreditation documents as outlined by DISA Risk Management Framework (RMF), Cybersecurity Service Provider (CSSP), USCENTCOM, and Authorizing Official (AO) guidance.
- Maintain Enterprise Products List (EPL) and Accreditation Library for all approved products and systems and evaluate service level agreements.
- Prepare and process accreditation documents for Cross Domain Solutions.
- Research, analyze and document Information Assurance and Security polices and assist with interpretation of local policies.
- Track, document, and report all security related events and prepare relevant documentation for ISSM and AO review.
- Implement and enforce DoD Information System, Platform Information Technology (PIT) systems cybersecurity policies and procedures as defined by relevant cybersecurity-related documentation.
- Provide General IT Management support.
- Provide documentation/reports support as required.
- Provide meetings/briefings support as required.
- Provide functional training support as required.
- Provide OCONUS deployment/TDY travel support as required.
- Provide CONUS TDY support as required.
Then "Required Qualifications" heading then list:
- B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience.
- Firewall experience
- Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
- Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices.
- Certifications Required CISSP ITIL Foundation (candidate has up to 60 days to acquire ITIL Foundation certification)
- Clearance Required Department of Defense TS/SCI
Then EEO statement remove.
We need to map to sections: About the role (intro paragraphs about role and mission and company). Responsibilities (list). Requirements (maybe the required qualifications? But we also have Qualifications section maybe for education/experience? The posting lumps them together. We could split: Requirements = required qualifications (including experience, firewall, ability, understanding, certifications, clearance). Qualifications = maybe education/experience? But they already included B.S. etc. Could treat "Required Qualifications" as Qualifications section. But we also have Skills: maybe firewall experience, ability to implement system security measures, understanding of RMF etc. However we need to avoid duplication. Let's decide:
- About the role: introductory paragraphs (first three paragraphs) describing role, AFCENT mission, SMS background.
- Responsibilities: the list under Job Responsibilities.
- Qualifications: the education/experience requirement (B.S. and years) maybe plus certifications? But we also have Skills: firewall experience, ability to implement system security measures, understanding of RMF etc. Clearance could be under Requirements.
But the instructions: Use headings for section headings (About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we have separate Requirements and Qualifications and Skills. We need to allocate content accordingly without duplication.
We can interpret:
- Requirements: mandatory items like clearance, citizenship? Not given. Could be the "Clearance Required Department of Defense TS/SCI". Also maybe the "Certifications Required CISSP ITIL Foundation". Could be considered requirements.
- Qualifications: education and experience (B.S. and years).
- Skills: specific technical skills like firewall experience, ability to implement system security measures, understanding of RMF, NIST, DoD instructions, etc.
We must not invent content; we must preserve all substantive info. So we need to include all those items under appropriate headings.
Let's list items:
Education/Experience:
- B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience.
Certifications:
- CISSP
- ITIL Foundation (candidate has up to 60 days to acquire)
Clearance:
- Department of Defense TS/SCI
Skills/Abilities:
- Firewall experience
- Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation.
- Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices.
We could also include "Ability to implement system security measures..." as skill.
Now we need to output HTML.
We'll produce:
About the role
...combined paragraphs...
Responsibilities
- ... each responsibility ...
Qualifications
- B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience.
- CISSP certification
- ITIL Foundation certification (candidate has up to 60 days to acquire)
Skills
- Firewall experience
- Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation
- Experience and understanding of Risk Management Framework, NIST Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices
Requirements
- Department of Defense TS/SCI clearance
We need to ensure we didn't miss any substantive info: The AFCENT mission description, SMS background, etc. All included in About the role.
Check for duplicate lines: We have not repeated.
Check for boilerplate removed: EEO, "Submit your resume today!", "SMS is an Equal Opportunity Employer..." removed.
Check for any other info: The phrase "AFCENT’s mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT’s theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission." This is part of About the role.
Also "Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com ." Also part of About the role.
Now ensure we didn't miss any responsibility: The list includes all items. Let's verify each:
- Assist the ISSM by conducting research, analysis, and creating documentation in support of the RMF process.
- Analyze, evaluate and recommend the application of Air Force systems accreditation and certification procedures for existing and planned network architectures.
- Research, process and recommend approval of Firewall and Bluecoat Exception Requests.
- Process requests for removable media.
- Complete accreditation documents as outlined by DISA Risk Management Framework (RMF), Cybersecurity Service Provider (CSSP), USCENTCOM, and Authorizing Official (AO) guidance.
- Maintain Enterprise Products List (EPL) and Accreditation Library for all approved products and systems and evaluate service level agreements.
- Prepare and process accreditation documents for Cross Domain Solutions.
- Research, analyze and document Information Assurance and Security polices and assist with interpretation of local policies.
- Track, document, and report all security related events and prepare relevant documentation for ISSM and AO review.
- Implement and enforce DoD Information System, Platform Information Technology (PIT) systems cybersecurity policies and procedures as defined by relevant cybersecurity-related documentation.
- Provide General IT Management support.
- Provide documentation/reports support as required.
- Provide meetings/briefings support
. We need to preserve all substantive info; do not invent or summarize away detail. So we need to include all details from the posting. Let's extract content. First paragraph: "The Senior Information System Security Officer (ISSO) supports the Information System Security Manager (ISSM) in protecting and accrediting mission-critical Air Force and Department of Defense information systems. This position conducts cybersecurity research and analysis, develops Risk Management Framework (RMF) and Cross Domain Solution accreditation documentation, evaluates network architectures and security exception requests, and implements applicable DoD, DISA, CSSP, USCENTCOM, and Authorizing Official requirements. The Senior ISSO also maintains security records and approved-product libraries, tracks and reports security events, interprets information assurance policies, and provides IT management, reporting, briefing, training, and CONUS/OCONUS travel support as required." Second paragraph: "AFCENT’s mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT’s theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission." Third paragraph: "Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com ." Then "Submit your resume today!" is application instruction, remove. Then "Job Responsibilities" heading then list. List items: - Assist the ISSM by conducting research, analysis, and creating documentation in support of the RMF process. - Analyze, evaluate and recommend the application of Air Force systems accreditation and certification procedures for existing and planned network architectures. - Research, process and recommend approval of Firewall and Bluecoat Exception Requests. - Process requests for removable media. - Complete accreditation documents as outlined by DISA Risk Management Framework (RMF), Cybersecurity Service Provider (CSSP), USCENTCOM, and Authorizing Official (AO) guidance. - Maintain Enterprise Products List (EPL) and Accreditation Library for all approved products and systems and evaluate service level agreements. - Prepare and process accreditation documents for Cross Domain Solutions. - Research, analyze and document Information Assurance and Security polices and assist with interpretation of local policies. - Track, document, and report all security related events and prepare relevant documentation for ISSM and AO review. - Implement and enforce DoD Information System, Platform Information Technology (PIT) systems cybersecurity policies and procedures as defined by relevant cybersecurity-related documentation. - Provide General IT Management support. - Provide documentation/reports support as required. - Provide meetings/briefings support as required. - Provide functional training support as required. - Provide OCONUS deployment/TDY travel support as required. - Provide CONUS TDY support as required. Then "Required Qualifications" heading then list: - B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience. - Firewall experience - Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation. - Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices. - Certifications Required CISSP ITIL Foundation (candidate has up to 60 days to acquire ITIL Foundation certification) - Clearance Required Department of Defense TS/SCI Then EEO statement remove. We need to map to sections: About the role (intro paragraphs about role and mission and company). Responsibilities (list). Requirements (maybe the required qualifications? But we also have Qualifications section maybe for education/experience? The posting lumps them together. We could split: Requirements = required qualifications (including experience, firewall, ability, understanding, certifications, clearance). Qualifications = maybe education/experience? But they already included B.S. etc. Could treat "Required Qualifications" as Qualifications section. But we also have Skills: maybe firewall experience, ability to implement system security measures, understanding of RMF etc. However we need to avoid duplication. Let's decide: - About the role: introductory paragraphs (first three paragraphs) describing role, AFCENT mission, SMS background. - Responsibilities: the list under Job Responsibilities. - Qualifications: the education/experience requirement (B.S. and years) maybe plus certifications? But we also have Skills: firewall experience, ability to implement system security measures, understanding of RMF etc. Clearance could be under Requirements. But the instructions: Use headings for section headings (About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we have separate Requirements and Qualifications and Skills. We need to allocate content accordingly without duplication. We can interpret: - Requirements: mandatory items like clearance, citizenship? Not given. Could be the "Clearance Required Department of Defense TS/SCI". Also maybe the "Certifications Required CISSP ITIL Foundation". Could be considered requirements. - Qualifications: education and experience (B.S. and years). - Skills: specific technical skills like firewall experience, ability to implement system security measures, understanding of RMF, NIST, DoD instructions, etc. We must not invent content; we must preserve all substantive info. So we need to include all those items under appropriate headings. Let's list items: Education/Experience: - B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience. Certifications: - CISSP - ITIL Foundation (candidate has up to 60 days to acquire) Clearance: - Department of Defense TS/SCI Skills/Abilities: - Firewall experience - Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation. - Must possess experience and demonstrate an understanding of Risk Management Framework, National Institute of Technology and Standards (NIST) Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices. We could also include "Ability to implement system security measures..." as skill. Now we need to output HTML. We'll produce:
About the role
...combined paragraphs...
Responsibilities
- ... each responsibility ...
Qualifications
- B.S. in related field and 5 or more years’ relevant Information Security experience; or, 7 or more years’ relevant Information Security experience.
- CISSP certification
- ITIL Foundation certification (candidate has up to 60 days to acquire)
Skills
- Firewall experience
- Ability to implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation
- Experience and understanding of Risk Management Framework, NIST Cyber Framework, DoD and Service-level Instructions/Directives/Policies, and Cyber Security Regulations/Best Practices
Requirements
- Department of Defense TS/SCI clearance