Security Guard

Location: San Antonio, TX. This position is contingent upon bid award.

About the role

The Information Systems Security Officer (ISSO) provides enterprise cybersecurity and Risk Management Framework support to the Tri-Service Research Laboratory, Bioeffects Division, in support of the Air Force Research Laboratory enterprise. The position supports NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems and helps maintain compliant, current, and supportable cybersecurity authorization packages.

Responsibilities

• Perform Information Systems Security Officer duties aligned to DoD 8140 Cyberwarfare Work Role Code 721.
• Provide day-to-day cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.
• Serve as a cybersecurity consultant to unit technicians and customers regarding cybersecurity processes, policies, configurations, and implementation.
• Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy across the distributed AFRL organization.
• Support the Risk Management Framework (RMF) lifecycle and maintain current Authorization to Operate (ATO) packages, security documentation, and evidence in eMASS.
• Maintain and update system security plans, security assessment reports, plans of action and milestones, risk assessments, topology diagrams, software and hardware lists, standard operating procedures, and related artifacts.
• Upload changes to required ATO documentation in eMASS within three business days and maintain package artifacts for semiannual inspection.
• Support configuration management reviews, internal and external audits, inspections, vulnerability remediation, and maintenance of system hardening checklists and Security Technical Implementation Guides (STIGs).
• Use Assured Compliance Assessment Solution (ACAS), or other Air Force-approved scanning tools, to support audit controls and interpret vulnerability scan results.
• Conduct technical and non-technical risk and vulnerability assessments for systems, enclaves, applications, and software; document findings and support mitigation activities.
• Support Information Assurance Vulnerability Management dissemination, reporting, and compliance procedures.
• Maintain cybersecurity data and portfolio structures in ITIPS, AFRL RMF Workflow, and eMASS.
• Track DoD 8140.03 workforce qualification requirements, participate in related meetings, and support compliance metrics, reporting, and briefings.
• Support logical access onboarding and offboarding, including DD Form 2875 procedures and organizational account coordination.
• Verify completion of required cybersecurity training and support continued network access requirements for TSRL users.
• Support quarterly media destruction in accordance with Air Force and local policy.
• Attend cybersecurity meetings in person or virtually, prepare meeting minutes, and support the AFRL Cybersecurity Working Group through roll call, note taking, action tracking, project facilitation, and documentation development.
• Support system discovery, system categorization, compliant cybersecurity solution development, hardware and software entry/exit requirements, and organizational security policy development.
• Support administration and periodic review of MOAs, MOUs, and Acknowledgement of Responsibility letters for the RMF accreditation program.
• Courier classified equipment or media to approved TSRL destinations in accordance with applicable security regulations.
• Support AFRL Inspector General pre-inspection and post-inspection activities for the communications functional area.
• Support research, selection, implementation, operation, metrics collection, and reporting for IT pilot or exploratory projects with potential enterprise applicability.
• Provide timely, professional customer service and other duties as assigned within the scope of the position.

Qualifications

• Associate of Science degree in Information Technology or Cybersecurity
• Minimum one (1) year experience performing RMF requirements and providing cybersecurity services
• Possess current, valid CompTIA Security+ certification
• Possess Active Secret Clearance

Knowledge, Skills and Abilities

• Experience providing Intermediate-level cybersecurity work.
• Ability to execute day-to-day ISSO responsibilities across networked and standalone systems and maintain complete, inspection-ready security documentation.
• Ability to coordinate control implementation, assessment procedures, vulnerability remediation, and RMF package maintenance with system stakeholders.
• Knowledge of DoD and Air Force cybersecurity policy, RMF, ATO processes, DoDI 8510.01, NIST SP 800-53 Revision 5, CNSSI 1253 Revision 4, and related risk management directives.
• Knowledge of eMASS, ITIPS, AFRL RMF Workflow, ACAS or other Air Force-approved scanning tools, STIGs, vulnerability management, and cybersecurity audit evidence.
• Ability to assess threats and vulnerabilities, develop security risk profiles, document findings, and coordinate practical remediation plans.
• Ability to prepare and maintain accurate cybersecurity plans, technical reports, meeting minutes, briefings, standard operating procedures, and RMF artifacts.
• Ability to interpret technical and policy requirements and explain them clearly to users, technicians, managers, Authorizing Officials, auditors, and senior leaders.
• Ability to manage multiple systems, packages, deadlines, and compliance activities without overwriting or compromising other team members' data.
• Ability to collaborate with technical leads, Government stakeholders, external customers, inspectors, and working groups in a distributed organization.
• Possess customer-service skills sufficient to field cybersecurity questions and provide sound process, policy, configuration, and implementation guidance.
• Ability to safeguard confidential, proprietary, sensitive, and classified information and comply with OPSEC and public-release requirements.
• Ability to apply cybersecurity principles to cloud, virtualization, collaborative systems, multi-platform research computing, mobile technologies, and automated IT management environments.
• Ability to work a flexible schedule when mission requirements require after-hours support.

Physical Demands

While performing the duties of this job, the employee is regularly required to sit and talk or hear. The employee may use repeated motions that include the arms, wrists, hands and/or fingers. The employee is occasionally required to walk, stand, climb, balance, stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.