Cybersecurity Journeyman

Torch Technologies•San Antonio, TX

6d•Onsite

About The Position

Torch Technologies is seeking a Cybersecurity Analyst Journeyman to support the Air Force Human Resources Systems Division at Randolph AFB in the San Antonio, Texas area. The position supports the AFLCMC/GB Business and Enterprise Systems Directorate (BES)/GBH Human Resources Systems Division. The analyst helps track task orders and cyber taskings for HR applications, manages system access requests through approval phases, and verifies related documentation. The role also includes reviewing Checkmarx code scans and validating issues with system developers and software engineers. Familiarity with the Atlassian Tool Suite, especially Jira and Confluence, and configuration management using those tools is desired. The position assists in maintaining the operational security posture of assigned information technology. Duties include applying Air Force cybersecurity policies and procedures, maintaining certification and access-control documentation, ensuring users and system configurations meet security requirements, coordinating changes and responding to incidents or vulnerabilities with cybersecurity stakeholders, and initiating exceptions, deviations, or waivers when needed. The posting provides two separate sets of required qualifications: one for an ISSO-level role and one for an ISSM-level role. The ISSO requirements include a qualifying DCWF ISSO work-role certification at intermediate (journeyman) proficiency and an active Secret clearance. The ISSM requirements include an advanced (senior) DCWF ISSM work-role certification and the ability to obtain and maintain a Secret clearance. The schedule is Monday through Friday, 8 a.m. to 5 p.m., onsite at Randolph AFB/San Antonio, Texas. Travel is 0%–10%; relocation assistance is not available. The position is not contingent upon a contract award.

Requirements

For the listed ISSO qualification path: a bachelor’s or master’s degree in a related field and at least 3 years of experience in the technical/professional discipline, including 3 years in the DoW; alternatively, 7 years of directly related experience with the required certifications, including 5 years in the DoW.
For the listed ISSO qualification path: hold and maintain a DCWF ISSO work-role (722) personnel certification at intermediate (journeyman) proficiency for assigned systems/applications. Listed certifications are CGRC/CAP, CASP+, CCSP, Cloud+, SSCP, Security+, or GSEC.
For the listed ISSO qualification path: hold an active DoW Secret security clearance.
For the listed ISSM qualification path: a bachelor’s or master’s degree in a related field and at least 10 years of experience in the technical/professional discipline, including 5 years in the DoW; alternatively, 15 years of directly related experience with proper certifications, including 8 years in the DoW.
For the listed ISSM qualification path: hold and maintain a DCWF ISSM work-role (722) personnel certification at advanced (senior) proficiency for assigned systems/applications.
For the listed ISSM qualification path: ability to obtain and maintain a Secret clearance.
The introductory role description identifies experience with the Atlassian Tool Suite, especially Jira and Confluence, and knowledge of implementing configuration management with that suite as ideal qualifications.

Nice To Haves

Cloud experience.
Agile development methodologies.
Risk Management Framework (RMF) experience.
Experience with the Atlassian Tool Suite, especially Jira and Confluence, and knowledge of implementing configuration management with it.

Responsibilities

Assist with tracking task orders and ensuring HR applications are current with cyber taskings.
Track and manage system access requests through approval phases and ensure documentation is accurate.
Analyze Checkmarx code scans and review and validate issues with system developers and software engineers.
Assist in maintaining the appropriate operational security posture for assigned IT.
Implement and enforce Air Force cybersecurity policies, procedures, and countermeasures.
Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
Ensure users have required clearances and need-to-know, complete annual cybersecurity training, and understand their responsibilities before receiving IT access.
Maintain authorized user access-control documentation in accordance with the applicable Air Force Records Information Management System.
Ensure software, hardware, and firmware comply with applicable security configuration guidance, including security technical implementation guides and security requirement guides.
Ensure configuration management procedures and required approvals are followed before implementation.
Coordinate system changes or modifications with the system-level ISSM, SCA, and/or Wing Cybersecurity office.
Initiate protective or corrective measures with the ISSM when a security incident or vulnerability is discovered.
Report security incidents or vulnerabilities to the system-level ISSM and Wing Cybersecurity office in accordance with AFI 17-203, Cyber Incident Handling.
Initiate exceptions, deviations, or waivers to cybersecurity requirements.