Cybersecurity Engineer, Senior (ISSM)

Torch Technologies•Kettering, OH

1d•Onsite

About The Position

Torch Technologies is hiring a Senior Cybersecurity Engineer (ISSM) to support its EPASS GB contract in Kettering, Ohio, in the Dayton/WPAFB area. The position supports the AFLCMC/GB Business and Enterprise Systems Directorate and the Stock Control System (SCS), a web-based and mainframe wholesale and depot retail asset-management system serving Air Force, Marine Corps, and other service and agency customers. SCS supports worldwide combat readiness through the allocation, custody, and distribution of supplies and equipment. Its FIAR RDT&E efforts focus on modernizing and improving this capability. The ISSM provides cybersecurity support to the PMO and Capability Development Manager, assesses and continuously monitors cybersecurity risk, and helps ensure legacy and new capabilities comply with applicable enterprise standards and authorization strategies. The role serves as the primary cybersecurity technical advisor to the Authorizing Official (AO), Program Manager (PM), and Information System Owner (ISO), and integrates cybersecurity throughout the IT lifecycle. The role requires maintaining cybersecurity certifications and documentation, supporting system authorization and corrective actions, coordinating continuous monitoring, evaluating system and configuration changes, assessing security-control implementation, and reporting cybersecurity events or changes that affect authorization or security posture. The ISSM also ensures ISSOs and privileged users receive required technical training and certifications, and that Air Force IT is acquired, documented, operated, maintained, and disposed of properly. This is a Monday–Friday, 8 a.m.–5 p.m. position with 0–10% travel. Relocation assistance is not available. The position is not contingent upon a contract award. Torch Technologies describes its work environment as stable and professional and offers a competitive salary and comprehensive benefits. Employment is contingent on successfully completing a comprehensive background check.

Requirements

U.S. citizenship.
One of the following education and experience combinations: a master's or doctorate in a related field and 10 years of experience in the respective technical or professional discipline, including five years in the DoW; a bachelor's degree and 12 years of experience in the discipline, including five years in the DoW; or 15 years of directly related experience with appropriate certifications, including eight years in the DoW.
Knowledge, experience, and recognized ability to be considered highly skilled in the technical or professional field.
Advanced knowledge of the technical or professional discipline and comprehensive understanding of, and ability to apply, relevant standards, procedures, and practices.
Experience performing cybersecurity duties for assigned Air Force IT as outlined in DoWI 8500.01, AFI 17-130, and AFI 17-1301.
Experience validating, evaluating, and analyzing finding results and developer adjudications using automated testing tools such as Fortify, Checkmarx, SonarQube, or AppScan.
Experience using DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests, such as Jira, HP ALM, or eMASS.
Experience conducting information security continuous monitoring in accordance with an approved ISCM strategy.
Ability to meet and maintain an advanced (senior) proficiency-level personnel certification associated with DCWF ISSM work role 722, as outlined in applicable instructions. Accepted certifications listed include ISACA CISM; United America Technologies CISSO; FITSI FITSP-M; GIAC GCIA, GCSA, GCIH, GSLC, or GICSP; and (ISC)2 CISSP-ISSMP or CISSP.
Ability to perform work independently and oversee junior and journeyman contractor personnel.
Ability to interface with program-office, enterprise, and staff-level support.

Nice To Haves

Working knowledge of Agile Development methodology.
Experience with CheckMarx, SonarQube, Jira, Confluence, Mavin, Jenkins, or Bitbucket.

Responsibilities

Provide PMO and Capability Development Manager cybersecurity support, including assessing and continuously monitoring cybersecurity risk in accordance with applicable DoW instructions and authorization strategies.
Serve as the primary cybersecurity technical advisor to the AO, PM, and ISO.
Integrate cybersecurity into the IT lifecycle on behalf of the AO and in accordance with applicable instructions.
Complete and maintain required cybersecurity certifications and ensure Air Force IT cybersecurity documentation is current and accessible to authorized individuals.
Support the PM or ISO in maintaining current authorization to operate and, if required, approval to connect, and in implementing corrective actions identified in plans of action and milestones.
Coordinate development of an information system continuous monitoring (ISCM) strategy with the PM and AO staffs, and monitor proposed or actual system and environment changes.
Continuously monitor IT systems and their environments for security-relevant events.
Assess proposed configuration changes for potential impact to cybersecurity posture and assess security-control implementation quality against performance indicators.
Ensure cybersecurity events or configuration changes that affect authorization or adversely affect security posture are formally reported to the AO and other affected parties.
Ensure ISSOs and privileged users receive necessary technical training, obtain required cybersecurity certifications, and maintain proper clearances.
Ensure Air Force IT is acquired, documented, operated, used, maintained, and disposed of properly in accordance with applicable instructions.
Provide guidance on access control, configuration management, system and communications protection, contingency planning, incident handling, system and information integrity, security and privacy training and awareness, and cybersecurity-related software development activities and tools.
Validate, evaluate, and analyze findings and developer adjudications using automated testing tools.
Use DoW tracking systems to document cybersecurity deficiencies, vulnerabilities, and change requests.
Conduct ISCM by maintaining awareness of information security, vulnerabilities, and threats to support organizational risk-management decisions.
Perform tasks independently and oversee the work of junior and journeyman contractor personnel.