Cybersecurity Engineer, Senior (ISSM)

Torch Technologies, Inc.•Kettering, OH

1d•Onsite

About The Position

Torch Technologies is hiring a Senior Cybersecurity Engineer (ISSM) to support its EPASS GB contract in Kettering, Ohio, in the Dayton/WPAFB area. The role supports the AFLCMC/GB Business and Enterprise Systems Directorate and the Stock Control System, a web-based and mainframe wholesale and depot retail asset management system serving Air Force, Marine Corps, and other service and agency customers. The system supports worldwide combat readiness and sustainability through supply and equipment allocation, custody, and distribution. Its FIAR RDT&E efforts focus on modernizing and improving this Air Force capability. The successful candidate provides cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01. The role assesses and continuously monitors cybersecurity risk and ensures legacy and new capabilities adhere to applicable enterprise standards, including the Risk Management Framework, Cybersecurity Framework, and NIST guidance, as well as the Authorization Official’s Information System Continuous Monitoring strategy. As the primary cybersecurity technical advisor to the AO, PM, and ISO, the ISSM integrates cybersecurity throughout the IT lifecycle on behalf of the AO and in accordance with DoDI 8510.01. This is an onsite position with a 40-hour work week and 0–10% travel. Relocation assistance is not available. The position is not contingent upon contract award.

Requirements

U.S. citizenship.
One of the following education and experience combinations: a master's or doctorate in a related field and 10 years of experience in the applicable technical or professional discipline, including five years in the DoW; a bachelor's degree and 12 years of applicable experience, including five years in the DoW; or 15 years of directly related experience with appropriate certifications, including eight years in the DoW.
Possess and maintain a T3/Secret clearance.
Experience performing cybersecurity duties under DoDI 8500.01, AFI 17-130, and AFI 17-1301 for assigned Air Force IT.
Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools such as Fortify, Checkmarx, SonarQube, and AppScan.
Experience using DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests, such as Jira, HP ALM, and eMASS.
Experience conducting ISCM in accordance with an approved strategy.
Ability to perform independently and oversee junior and journeyman contractor personnel.
Advanced knowledge of the relevant technical or professional discipline and comprehensive understanding of how to apply related standards, procedures, and practices across program-office, enterprise, and staff-level support interfaces.
Experience providing guidance on access control; configuration management; system and communications protection; contingency planning; incident handling; system and information integrity; security and privacy training and awareness; and cybersecurity-related software development activities, software, and tools.
Meet and maintain an advanced (senior) proficiency personnel certification associated with the DCWF ISSM work role (722), as specified in the posting. Listed certifications include ISACA CISM; United America Technologies CISSO; FITSI FITSP-M; GIAC GCIA, GCSA, GCIH, GSLC, or GICSP; and (ISC)2 CISSP-ISSMP or CISSP.

Nice To Haves

Certified SCRUM Master.
Other Agile certifications.
Working knowledge of Agile development methodology.
Experience with CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
Ensure all Air Force IT cybersecurity documentation is current and accessible to properly authorized individuals.
Support the PM or ISO in maintaining current authorization to operate and approval to connect, if required, and in implementing corrective actions identified in the plan of actions and milestones.
Coordinate with the PM and AO staffs to develop an ISCM strategy and monitor proposed or actual changes to the system and its environment.
Continuously monitor the IT system and its environment for security-relevant events.
Assess proposed configuration changes for potential impact to the cybersecurity posture.
Assess the quality of security-control implementation against performance indicators.
Ensure cybersecurity events or configuration changes that affect Air Force IT authorization or adversely affect security posture are formally reported to the AO and other affected parties.
Ensure ISSOs and privileged users receive necessary technical training, obtain required cybersecurity certification, and maintain proper clearances.
Ensure Air Force IT is acquired, documented, operated, used, maintained, and disposed of in accordance with applicable DoD instructions.
Provide cybersecurity guidance on access control, configuration management, system and communications protection, contingency planning, incident handling, system and information integrity, security and privacy awareness training, and software development activities and tools.
Validate, evaluate, and analyze findings and developer adjudications using automated testing tools.
Use DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
Conduct information security continuous monitoring by maintaining awareness of information security, vulnerabilities, and threats to support organizational risk management decisions.
Perform tasks independently and oversee junior and journeyman contractor personnel.