Cybersecurity Engineer, Senior (ISSM)

Torch Technologies • Kettering, OH

1d • Onsite

About The Position

Torch Technologies is hiring a Senior Cybersecurity Engineer (ISSM) to support its EPASS GB contract in Kettering, Ohio, in the Dayton/WPAFB area. The role supports the AFLCMC/GB Business and Enterprise Systems Directorate and the Stock Control System, a web-based and mainframe asset management system serving Air Force, Marine Corps, and other service and agency customers. The system supports worldwide combat readiness through the allocation, custody, and distribution of supply and equipment items. Its FIAR RDT&E efforts focus on modernizing and improving this Air Force capability.

The successful candidate provides cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01. The role assesses and continuously monitors cybersecurity risk, ensuring legacy and new capabilities adhere to enterprise standards, including the Risk Management Framework, Cybersecurity Framework, and NIST, as well as the Authorization Official’s Information System Continuous Monitoring strategy. The ISSM serves as the primary cybersecurity technical advisor to the AO, PM, and ISO, and integrates cybersecurity throughout the IT lifecycle on behalf of the AO in accordance with DoDI 8510.01.

This is an onsite position scheduled for 40 hours per week, with 0–10% travel. Relocation assistance is not available. The position is not contingent upon contract award.

Requirements

• U.S. citizenship.
• One of the following education and experience combinations: a master's or doctorate in a related field and 10 years of experience in the relevant technical or professional discipline, including five years in the DoW; a bachelor's degree and 12 years of relevant experience, including five years in the DoW; or 15 years of directly related experience with the required certifications, including eight years in the DoW.
• Must possess and be able to maintain a T3/Secret clearance.
• Experience performing cybersecurity duties in accordance with DoDI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
• Experience validating, evaluating, and analyzing findings and developer adjudications using automated tools such as Fortify, Checkmarx, SonarQube, and AppScan.
• Experience using DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests; examples include Jira, HP ALM, and eMASS.
• Experience conducting information security continuous monitoring in accordance with an approved ISCM strategy.
• Ability to perform tasks independently and oversee junior and journeyman contractor personnel.
• Advanced knowledge of the technical or professional discipline and comprehensive understanding of associated standards, procedures, and practices.
• At minimum, meet and maintain an advanced (senior) proficiency-level personnel certification associated with the DCWF ISSM work role (722), as outlined in DoWI 8510.01, AFMAN 17-1305, and AFI 17-101 for assigned systems or applications. Acceptable certifications listed include ISACA CISM, United America Technologies CISSO, FITSI FITSP-M, GIAC GCIA, GIAC GCSA, GIAC GCIH, GIAC GSLC, GIAC GICSP, (ISC)2 CISSP-ISSMP, and (ISC)2 CISSP.

Nice To Haves

• Certified SCRUM Master.
• Other Agile certifications.
• Working knowledge of Agile development methodology.
• Experience with Checkmarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

• Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
• Ensure AF IT cybersecurity documentation is current and accessible to properly authorized individuals.
• Support the PM or ISO in maintaining current authorization to operate and approval to connect, when required, and in implementing corrective actions identified in the plan of actions and milestones.
• Coordinate with the PM and AO staffs to develop an ISCM strategy and monitor proposed or actual changes to the system and its environment.
• Continuously monitor the IT system and its environment for security-relevant events.
• Assess proposed configuration changes for potential impact on the cybersecurity posture.
• Assess the quality of security control implementation against performance indicators.
• Ensure cybersecurity events or configuration changes affecting AF IT authorization or security posture are formally reported to the AO and other affected parties.
• Ensure ISSOs and privileged users receive necessary technical training, obtain required cybersecurity certification, and maintain proper clearances.
• Ensure AF IT is acquired, documented, operated, used, maintained, and disposed of in accordance with applicable DoD instructions.
• Perform cybersecurity duties for assigned AF IT, including continuous monitoring and management of vulnerabilities, threats, and security risks.
• Validate, evaluate, and analyze finding results and developer adjudications using automated testing tools.
• Use DoD tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
• Provide guidance on access control, configuration management, system and communications protection, contingency planning, incident handling, system and information integrity, security and privacy training, and cybersecurity-related software development.
• Perform tasks independently and oversee junior and journeyman contractor personnel.

Benefits

• ESOP participation.
• 401(k) match.
• Medical insurance.
• Dental insurance.
• Vision insurance.
• Life insurance.
• Short-term disability.
• Long-term disability.
• Flexible spending accounts.
• Health Savings Accounts.
• Health Reimbursement Accounts.
• Employee Assistance Program.
• Education assistance.
• Paid time off.
• Holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior