Cybersecurity Engineer, Senior (ISSM)

Torch Technologies, Inc. • Kettering, OH

1d • Onsite

About The Position

Torch Technologies is hiring a Cybersecurity Engineer (ISSM) to support its EPASS GB contract in Kettering, Ohio, in the Dayton/Wright-Patterson Air Force Base area. The role supports the AFLCMC/GB Business and Enterprise Systems Directorate and the Automated Project Order (APO) Form System, which automates the AFMC Form 181 process for coordinating depot repair funding workloads. The system provides authorized users with document status, transaction history, and data for reporting, and helps ensure work does not begin without proper funding confirmation.

The successful candidate provides cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01. The position assesses and continuously monitors cybersecurity risk, ensuring legacy and new capabilities comply with enterprise standards and the Authorizing Official’s Information System Continuous Monitoring strategy. As the primary cybersecurity technical advisor to the AO, PM, and ISO, the ISSM integrates cybersecurity throughout the IT lifecycle and supports authorization, configuration, control assessment, incident reporting, training, and proper IT acquisition and disposition.

Requirements

• U.S. citizenship.
• Meet one of the following education and experience paths: a master's or doctorate in a related field and 10 years of relevant experience, including five years in the DoW; a bachelor's degree and 12 years of relevant experience, including five years in the DoW; or 15 years of directly related experience with appropriate certifications, including eight years in the DoW.
• Possess and be able to maintain a T3/Secret clearance.
• Demonstrated highly skilled technical or professional expertise and the ability to perform tasks independently and oversee junior and journeyman contractor personnel.
• Advanced knowledge of the technical/professional discipline and comprehensive ability to apply related standards, procedures, and practices, including program-office, enterprise, and staff-level support interfaces.
• Experience performing cybersecurity duties under DoWI 8500.01, AFI 17-130, and AFI 17-1301 for assigned AF IT.
• Experience validating, evaluating, and analyzing findings and developer adjudications using automated testing tools such as Fortify, Checkmarx, SonarQube, or AppScan.
• Experience using DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests; examples include Jira, HP ALM, and eMASS.
• Experience conducting information security continuous monitoring in accordance with an approved ISCM strategy.
• Meet and maintain an advanced (senior) proficiency-level personnel certification associated with the DCWF ISSM work role (722), such as ISACA CISM; United America Technologies CISSO; FITSI FITSP-M; GIAC GCIA, GCSA, GCIH, GSLC, or GICSP; or (ISC)2 CISSP-ISSMP or CISSP.
• Work onsite in Kettering, Ohio, with a schedule of Monday through Friday, 8 a.m. to 5 p.m.

Nice To Haves

• Certified SCRUM Master certification.
• Other Agile certifications.
• Working knowledge of Agile development methodology.
• Experience with CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

• Provide cybersecurity support to the PMO/Capability Development Manager in accordance with DoDI 8500.01.
• Assess and continuously monitor cybersecurity risk and ensure capabilities comply with RMF, CSF, NIST, and the Authorizing Official’s ISCM strategy.
• Serve as the primary cybersecurity technical advisor to the AO, PM, and ISO, and integrate cybersecurity throughout the IT lifecycle.
• Complete and maintain required cybersecurity certification in accordance with AFMAN 17-1303.
• Ensure AF IT cybersecurity documentation is current and accessible to properly authorized individuals.
• Support the PM or ISO in maintaining current authorization to operate and approval to connect, when required, and in implementing corrective actions identified in plans of action and milestones.
• Coordinate development of an ISCM strategy with the PM and AO staffs and monitor proposed or actual changes to the system and its environment.
• Continuously monitor IT and its environment for security-relevant events.
• Assess proposed configuration changes for potential effects on cybersecurity posture.
• Assess the quality of security control implementation against performance indicators.
• Formally report cybersecurity events or configuration changes affecting authorization or security posture to the AO and other affected parties.
• Ensure ISSOs and privileged users receive necessary technical training, obtain required cybersecurity certifications, and maintain proper clearances.
• Ensure AF IT is acquired, documented, operated, used, maintained, and disposed of in accordance with DoDI 5000.02 and DoDI 8510.01.
• Provide guidance on access control, configuration management, system and communications protection, contingency planning, incident handling, information integrity, security and privacy awareness, and cybersecurity-related software development.
• Validate, evaluate, and analyze findings and developer adjudications using automated testing tools.
• Use DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
• Conduct ISCM by maintaining awareness of information security, vulnerabilities, and threats to support organizational risk-management decisions.

Benefits

• Employee Stock Ownership Plan (ESOP) participation.
• 401(k) match.
• Medical insurance.
• Dental insurance.
• Vision insurance.
• Life insurance.
• Short-term disability insurance.
• Long-term disability insurance.
• Flexible spending accounts.
• Health Savings Accounts.
• Health Reimbursement Accounts.
• Employee Assistance Program (EAP).
• Education assistance.
• Paid time off.
• Holidays.
• Stable and professional work environment.
• Competitive salary.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior