Information System Security Officer

• Ensure the confidentiality, integrity, and availability of unclassified and classified Information Systems (ISs) and data using Air Force (USAF) approved information security standards and approved industry best practices. 
• Provide cybersecurity support for various test area systems to include real-time, standalone, and networked systems. 
• Evaluate approved new technologies prior to implementation within the organizational environment. 
• Provide cybersecurity support for application development, planning, network implementation, systems integration, communication support, computer-communication maintenance, asset management, and security controls. 
• Assist the government in producing, maintaining, and revising Standard Operating Procedures (SOP), System Security Plans (SSP), POA&Ms, and Authorization to Operate (ATO) supporting Bodies of Evidence (BoE) documentation. 
• Maintain critical cybersecurity artifacts and BoEs within e-MASS, conducting robust continuous monitoring activities to ensure the retention of active ATOs.
• Perform security scans and analysis using DISA Security Technical Implementation Guide (STIG) and Assured Compliance Assessment Solution (ACAS) to ensure systems security settings and patch levels are compliant.
• Perform generation, collection, and preservation of IS audit logs in accordance with the SSP and USAF requirements. 
• Monitor and document system changes in accordance with Configuration Management Policy and applicable SSPs. 
• Perform hardware and software SIA documentation and vulnerability analysis.
• Media Control management to include documentation, issuance, destruction, and accountability of all media

Education and Experience Qualifications: 

• Bachelor's degree in Computer Science or other relevant field with 0-3 years’ experience. Experience may be substituted for education with government approval. 
• Must meet the position and certification requirements outlined in DoD Directive 8140 / 8570.01-M for Information Assurance Management (IAM) Level I (e.g., Security+CE or equivalent foundational certification).
• Knowledge and expertise in Cybersecurity requirements, technologies, and computer security as applied to DoD networks. 
• Robust working knowledge of NIST 800-53 (Rev 5) controls and Risk Management Framework (RMF) process.
• Demonstrates familiarity or experience with Experience with Defense Information Systems Agency (DISA) STIGs, SCAP Compliance Checker (SCC), STIG Viewer / evaluateSTIG, Host Base Security System (HBSS), and ACAS is highly preferred. 
• Experience developing SOPs, SSPs, POA&Ms, and other DoD/DoW documentation.
• Basic understanding of Microsoft Windows and Red Hat Enterprise Linux Operating Systems (OS) environments.
• Familiarity/proficiency with processes and functions, information technology hardware and software products, as well as computer peripherals (e.g., printers, monitors, hard drives, docking stations, scanners, etc.). 
• Excellent verbal and written communication skills along with customer interaction and presentation capabilities. 
• Basic understanding of Windows PowerShell and Python scripting (desired). 
• Basic understanding of DNS, DHCP, TCP, UDP, Layer 2 and Layer 3 (desired).

Security Clearance:

• Must hold an active DoD/DoW TOP SECRET Security Clearance with last investigation within 6 years. 
• Exceptionally qualified candidates will be considered with a current SECRET Clearance for upgrade to Top Secret.