Journeyman Information System Security Officer with Security Clearance

Overview

Journeyman Information System Security Officer (ISSO) located at Hill AFB, Utah.

Required Qualifications / Skills

• Must have and be able to maintain an active Secret clearance
• Must be a US citizen
• Certifications: IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional)
• PREFERRED: CISSP
• Education: Bachelor's or Master's Degree in a related field and at least 3 years of experience in the DoD, OR 7 years of directly related experience, 5 of which must be in the DoD.

Preferred Qualifications / Skills

• Technical Skills: Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance; experience using eMASS for authorization packages, artifact management, and accreditation support; vulnerability assessment and risk mitigation analysis; STIG/SRG implementation and configuration management; security audits, assessments, and incident response support; information system security and operational security posture management; secure system and network design support in DoD environments.
• Interpersonal Skills: Ability to develop innovative approaches to complex test problems; strong attention to quality, adequacy, and completeness of test results and conclusions; ability to deliver thorough, timely, and efficient task execution; ability to provide clear analysis and recommendations to program test leadership.

Responsibilities

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need-to-know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.