Job DescriptionJob DescriptionCustomer: USAF
Location: Schriever SFB
Security Clearance: Secret clearance
Position Description:
The ISSO will administer, assure, and maintain the required operational security posture assigned information systems. The candidate will collaborate with the Information Systems Security Manager and will monitor systems and their environments. This position is a Sys Admin position that performs ISSO duties.
Duties:
• Develop and update the system security system control traceability matrix and the system security plan.
• Develop and staff the assessment and authorization (A&A) package and participating in A&A activities for assigned systems.
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package.
• Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the information systems.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
• Ensure audit records are collected and reviewed.
• Identify the information systems that will process classified information; the volume, relative sensitivity, and perishability of the information (TEMPEST).
• Establish and manage a media creation, destruction, and tracking program; may be required to maintain a media inventory and ensure accountability for all classified material.
• Maintain control of, and account for, classified assets.
Required Skills:
• A minimum of 7 years practical / relevant experience with information system security / information assurance / cybersecurity processes.
• Must have a strong DoD/USAF information security policy background with practical / hands-on experience applying RMF / JSIG processes and principles
• Experience developing and/or contributing to RMF body of evidence composition, applicable artifacts, and associated control families
• Experience working on a SAP program with JSIG and obtaining an ATO
• Must have a strong understanding of AF systems and PC requirements (i.e., a working knowledge of the directives and governing policies governing information systems)
• Clear understanding of audits as they pertain to government information systems security
• Familiarity with data leakage protection technologies
• Understanding of COMSEC, EMSEC, and TEMPEST regulations and best practices
• Expertise and training in information assurance/security
Required Clearance:
• Active / Valid DoD TS/SCI-eligible clearance (i.e. DCID 6/4 eligibility); applicant must maintain clearance in active/valid status.
• Clearance investigation close date must be no older than 5 years, 6 months at the time of application.
• Must be willing to submit to, and be able to pass, a CI polygraph.
Required Certification:
• Active / valid DoD 8570.01-M IAT-II certification (Security +); applicant must maintain currency of same.
Preferred Qualifications:
• Working knowledge of vulnerability scanning software (ACAS, SCAP, etc.).
• Practical experience accrediting a SAPF / SCIF (e.g., completing / staffing the fixed facility checklist (FFC) and other supporting documents).
• Ability to quickly adapt to new situations
• Strong commitment to team environment
• Capacity to work unsupervised
Physical Requirements:
• Work may involve sitting or standing for extended periods of time.
• Position may require typing and reading from a computer screen.
• Must have sufficient mobility, including but not limited to bending, reaching, and kneeling to complete daily duties in a timely and efficient manner.
• Due to parking availability and location of work, walking moderate to long distances may be required.
Work Environment, Equipment, and Machines:
• Office setting that includes sedentary physical effort. However, may include lifting of weight up to thirty (30) pounds
• No unusual hazards nor unusual environmental conditions on job site
• The DoD and USAF have implemented specific COVID-19 mitigation measures and contract employees must comply with established guidance.
• Ability to operate office equipment such as a personal computer, printer, copy machine, telephone, fax machine and other equipment including desk supplies and other workrelated tools as required.
Attendance:
• This position supports an operational work center providing 12 hours/day coverage during the standard Monday-Friday work week. Shift work may be required on a rotational or permanent basis as determined by mission needs.
• Regular attendance of scheduled hours is extremely important, but not critical, except for deadlines and meetings.
• Punctuality and regular attendance are necessary to meet deadlines.
• Must exhibit flexibility of work hours to adjust to surge situations based on critical mission requirements.
Other Essential Functions:
• Must demonstrate professional behavior at all times when dealing with customers, management and co-workers.
• Must have clear, concise and accurate communications skills in English, both verbal and written.
• Grooming and dress must be appropriate for the position and must not impose a safety risk to employees or others.
• Must maintain a positive work atmosphere by behaving and communicating in a professional manner.
• Independent personal transportation to work site is required.
• Travel to and from customer's locations may be required to support projects. This may involve airline travel. In some cases, accommodations can possibly be made for POV, if necessary.
• When operating any vehicle for work purposes, must wear seat belt and in addition, no cellular devices are to be used when vehicle is in motion.
Company DescriptionCyber Security company, specializing in specific cyber defense activities and IT services. We are a SDVOSB.Company DescriptionCyber Security company, specializing in specific cyber defense activities and IT services. We are a SDVOSB.