Cybersecurity Engineer, Senior (ISSM)

Torch Technologies, Inc.•Kettering, OH

2d•Onsite

About The Position

Torch Technologies is hiring a Senior Cybersecurity Engineer serving as an Information System Security Manager (ISSM) in Kettering, Ohio, to support the EPASS GB contract and the AFLCMC/GB Business and Enterprise Systems Directorate. The role supports the Stock Control System (SCS), a web-based and mainframe wholesale and depot retail asset management system used by the Air Force, Marine Corps, and other service and agency customers. SCS supports worldwide combat readiness and sustainability through the allocation, custody, and distribution of supply and equipment. The position contributes to SCS financial improvement, audit readiness, test, and evaluation modernization efforts. The ISSM provides cybersecurity support to the PMO and Capability Development Manager, serves as a primary cybersecurity technical advisor to the Authorizing Official, Program Manager, and Information System Owner, and integrates cybersecurity throughout the IT lifecycle. The role assesses and continuously monitors cybersecurity risk, maintains authorization and supporting documentation, coordinates continuous monitoring, evaluates changes and security controls, and ensures cybersecurity issues are reported and addressed in accordance with applicable Department of War and Air Force policies and standards.

Requirements

U.S. citizenship.
One of the following education and experience combinations: a master's or doctorate degree in a related field and 10 years of experience in the relevant technical or professional discipline, including five years in the DoW; a bachelor's degree and 12 years of relevant experience, including five years in the DoW; or 15 years of directly related experience with the required certifications, including eight years in the DoW.
Highly skilled technical or professional expertise, with recognized ability in the field.
Ability to perform tasks independently and oversee junior and journeyman contractor personnel.
Advanced knowledge of the technical or professional discipline and comprehensive understanding of applicable standards, procedures, and practices, including program office, enterprise, and staff-level support interfaces.
Experience providing guidance on access control; configuration management; system and communications protection; contingency planning; incident handling; system and information integrity; security and privacy training and awareness; and cybersecurity-related software development activities, software, and tools.
Experience performing cybersecurity duties under DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned Air Force IT.
Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools such as Fortify, Checkmarx, SonarQube, and AppScan.
Experience using DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests, such as Jira, HP ALM, and eMASS.
Experience conducting ISCM by maintaining awareness of information security, vulnerabilities, and threats in support of organizational risk-management decisions under an approved ISCM strategy.
Must meet and maintain an advanced (senior) proficiency-level personnel certification associated with DCWF ISSM work role 722. Listed certifications include ISACA CISM; United America Technologies CISSO; FITSI FITSP-M; GIAC GCIA, GCSA, GCIH, GSLC, or GICSP; (ISC)2 CISSP-ISSMP; or (ISC)2 CISSP.

Nice To Haves

Working knowledge of Agile development methodology.
Experience with CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

Provide PMO/Capability Development Manager cybersecurity support, including assessing and continuously monitoring cybersecurity risk and ensuring capabilities adhere to RMF, CSF, NIST, and the Authorizing Official’s ISCM strategy.
Serve as the primary cybersecurity technical advisor to the Authorizing Official, Program Manager, and Information System Owner.
Integrate cybersecurity into and throughout the IT lifecycle on behalf of the Authorizing Official.
Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
Ensure Air Force IT cybersecurity documentation is current and accessible to properly authorized individuals.
Support the Program Manager or Information System Owner in maintaining authorization to operate and, if required, approval to connect, and in implementing corrective actions identified in the plan of actions and milestones.
Coordinate development of an ISCM strategy with the Program Manager and Authorizing Official staff, and monitor proposed or actual changes to the system and its environment.
Continuously monitor the IT system and environment for security-relevant events.
Assess proposed configuration changes for potential effects on cybersecurity posture.
Assess security control implementation quality against performance indicators.
Ensure cybersecurity events or configuration changes affecting authorization or security posture are formally reported to the Authorizing Official and other affected parties.
Ensure ISSOs and privileged users receive necessary technical training, obtain required cybersecurity certifications, and maintain proper clearances.
Ensure Air Force IT is acquired, documented, operated, used, maintained, and disposed of in accordance with applicable Department of War instructions.
Perform cybersecurity duties in accordance with applicable DoW and Air Force instructions and guidance.
Validate, evaluate, and analyze automated security testing findings and developer adjudications.
Use DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
Conduct information security continuous monitoring to maintain awareness of information security, vulnerabilities, and threats in support of organizational risk-management decisions.
Perform independently and oversee the work of junior and journeyman contractor personnel.