Information System Security Officer (ISSO)

Duties

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Affiliate with the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Affiliate with the ISSM in collecting, analyzing, and preserving digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need-to-know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.

Qualifications

• Must be a U.S. Citizen
• Clearance: Must have and be able to maintain an Active Secret Clearance.
• Preferred Qualifications: 7+ years of experience within a DoD setting.
• Education: Bachelor’s or master’s Degree in a related field.
• Preferable Certifications: IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional (CISSP), or equivalent certification).
• Must maintain required cybersecurity certifications in accordance with AFMAN 17-1303.
• Technical Skills: Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance; Experience using eMASS for authorization packages, artifact management, and accreditation support; Vulnerability assessment and risk mitigation analysis; STIG/SRG implementation and configuration management; Security audits, assessments, and incident response support; Information system security and operational security posture management; Secure system and network design support in DoD environments.
• Interpersonal Skills: Ability to develop innovative approaches to complex test problems; Strong attention to quality, adequacy, and completeness of test results and conclusions; Ability to deliver thorough, timely, and efficient task execution; Ability to provide clear analysis and recommendations to program test leadership.
• Travel: Travel may be required at the customer's discretion.