ISSO/AFSO
- for any list of duties/requirements/benefits. Use
for prose. We need to decide sections: About the role (intro paragraph). Responsibilities (list). Requirements (maybe combine required and preferred? Could separate Required Qualifications and Preferred Qualifications). But we have headings: Requirements, Qualifications, Skills. Could map: Requirements = Required Education, Experience, & Skills. Qualifications = Preferred Education, Experience, & Skills. Skills maybe not separate. Could combine skills within those. But we need to avoid thin sections. Perhaps we can have sections: About the role, Responsibilities, Required Qualifications, Preferred Qualifications, Pay, Benefits, Schedule. That's 7 sections. Use h3 for each. Check each section has real content. About the role: paragraph from "Job Description As a Cybersecurity professional..." up to "make impacts in the following ways;" maybe include that sentence? Actually the sentence ends with "make impacts in the following ways;" then list of responsibilities. So About the role could be the introductory paragraph before the list. Let's extract: "Job Description As a Cybersecurity professional with BAE Systems, supporting and protecting information systems critical to national security at one of the leading companies in Aerospace and Defense. Develop your Information Assurance (IA) career through hands on application, work with seasoned professionals, and a training and development plan designed to grow your skills in a fast paced, team-based environment. If you are looking to learn, influence, and help develop top cyber technologies, applications, and processes that protect and service our customers wherever they may be air, land, and sea come join our award-winning security team here at Electronic Systems (ES) and make impacts in the following ways;" That's the intro. Responsibilities: bullet list after that: "Support adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications.Partner with the Information System Security Manager (ISSM) to maintain Authority to Operate (ATO) approvals for various systems by adhering to the Risk Management Framework (RMF).Supports cybersecurity efforts throughout the RMF process for one or more assigned programs(s) to include the enforcement of System Security Plans, Plans of Action and Milestones (POA&Ms), assessing and auditing systems security controls.Support the management of COMSEC materials.Support the management of PERSEC and PHYSEC as well as other related security functions and duties as assigned." We need to split into list items. Each sentence separated by period but no spaces? We'll split. Required Qualifications: "Minimum of an active DOD Secret Clearance is requiredIAM Level I certification commensurate with DoD 8570.1M requirements (or ability to obtain certification within 6 months)High School Diploma and 2 to 3 years of relevant experienceHigh level of personal motivation and initiative to learn and acquire new skills, and adapt seamlessly to an ever-changing security environmentCustomer focused, excellent communicator and ability to work with limited supervision.Strong organizational skillsAble to interface with other IA team members, other security disciplines (industrial security, physical security, special programs security, etc.), and program personnelBasic understanding of simple networks, operations systems and computer functions.Coursework in a technical discipline (i.e. programming/scripting, systems administration, cybersecurity/information assurance, etc.)" We need to split into list items. Preferred Qualifications: "Top Secret SCI ClearanceWorking knowledge of system functions, security policies, technical security safeguards, and operational security measures.Working knowledge of information security technologyWorking knowledge of information security management and complianceExperience with auditing and certifying compliance of various systems (Windows, Linux, Network Devices and peripherals).Experience with the preparation of Assessment and Authorization (A&A) documents and proceduresExperience with development and delivery of IA-related briefings and training material.Experience with compliance and vulnerability scanning tools (Nessus, SCAP, ACAS, SCC)." Pay: "Full-Time Salary Range: $97008 - $164914 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience." Benefits: paragraph about benefits. Schedule: "Because of the need for consistent, in-person collaboration and/or the requirement to perform all work onsite due to the nature of this particular role, it will be performed full-time on site. This means work will be conducted on location at a BAE Systems facility 100% of the time." Also maybe include About BAE Systems Intelligence & Security as a section? Could be "About the company" but not in prescribed headings. Could treat as "About BAE Systems" but not required. The instruction says use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should stick to those. The company description could be considered "About the role"? No. Might be extra but could be omitted? The instruction: "Preserve ALL substantive information". So we need to include that company description somewhere. Could fit under "About the role"? Not really. Could add a section "About BAE Systems" but not in list. However we could incorporate it into "About the role" as extra paragraph? Might be okay. But better to add a section "About the company" but not in allowed headings? The instruction says use h3 for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but says "use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)". It implies those are examples; we could add others if needed. However to be safe, we could include company description under "About the role" as additional paragraph. But that might misrepresent. However the instruction: "Prefer a few substantive sections over many thin ones." So maybe we can combine company description into "About the role" as a paragraph after the intro. That would preserve info. Thus About the role will have two paragraphs: intro and company description. Now produce HTML. We need to ensure no markdown fences. Just raw HTML. Let's craft.
About the role
Job Description As a Cybersecurity professional with BAE Systems, supporting and protecting information systems critical to national security at one of the leading companies in Aerospace and Defense. Develop your Information Assurance (IA) career through hands on application, work with seasoned professionals, and a training and development plan designed to grow your skills in a fast paced, team-based environment. If you are looking to learn, influence, and help develop top cyber technologies, applications, and processes that protect and service our customers wherever they may be air, land, and sea come join our award-winning security team here at Electronic Systems (ES) and make impacts in the following ways;
BAE Systems, Inc. is a defense, aerospace, and security company headquartered in Falls Church, Virginia, with more than 40,000 employees worldwide. We serve, supply, and protect those who protect us. As one of the most geographically diverse international defense companies, we deliver a full range of products and services spanning air, land, maritime, space, and cyber, including advanced electronics, intelligence solutions, and dedicated customer support. Our culture is performance-driven and values-led, built on curiosity, creativity, and collaboration. Purpose isn't a tagline here. It's what drives us. We're developing breakthrough technologies that defend national security and make a lasting impact on our communities and our planet. When you join BAE Systems, you're not just building a career. You're contributing to a mission that truly matters.
Then Responsibilities:Responsibilities
- Support adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications.
- Partner with the Information System Security Manager (ISSM) to maintain Authority to Operate (ATO) approvals for various systems by adhering to the Risk Management Framework (RMF).
- Supports cybersecurity efforts throughout the RMF process for one or more assigned programs(s) to include the enforcement of System Security Plans, Plans of Action and Milestones (POA&Ms), assessing and auditing systems security controls.
- Support the management of COMSEC materials.
- Support the management of PERSEC and PHYSEC as well as other related security functions and duties as assigned.
Required Qualifications
- Minimum of an active DOD Secret Clearance is required
- IAM Level I certification commensurate with DoD 8570.1M requirements (or ability to obtain certification within 6 months)
- High School Diploma and 2 to 3 years of relevant experience
- High level of personal motivation and initiative to learn and acquire new skills, and adapt seamlessly to an ever-changing security environment
- Customer focused, excellent communicator and ability to work with limited supervision
- Strong organizational skills
- Able to interface with other IA team members, other security disciplines (industrial security, physical security, special programs security, etc.), and program personnel
- Basic understanding of simple networks, operations systems and computer functions
- Coursework in a technical discipline (i.e. programming/scripting, systems administration, cybersecurity/information assurance, etc.)
Preferred Qualifications
- Top Secret SCI Clearance
- Working knowledge of system functions, security policies, technical security safeguards, and operational security measures
- Working knowledge of information security technology
- Working knowledge of information security management and compliance
- Experience with auditing and certifying compliance of various systems (Windows, Linux, Network Devices and peripherals)
- Experience with the preparation of Assessment and Authorization (A&A) documents and procedures
- Experience with development and delivery of IA-related briefings and training material
- Experience with compliance and vulnerability scanning tools (Nessus, SCAP, ACAS, SCC)
Pay
Full-Time Salary Range: $97008 - $164914 Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Benefits:Benefits