Information Assurance II Information System Security Officer (ISSO)

DLS Engineering • Montgomery, AL

11d • $78,000 - $82,000 • Onsite

About The Position

DLS Engineering is seeking an Information Assurance II Information System Security Officer (ISSO) for a full-time, on-site position supporting the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. The role supports the 26th Network Operations Squadron (26 NOS), whose mission is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). The 26 NOS maintains network infrastructure—including routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN), and test labs—to support maneuverability and defense of classified and unclassified networks.

The ISSO implements and enforces cybersecurity policies, procedures, and countermeasures; manages user access and security documentation; verifies security configurations and configuration-management practices; and coordinates cybersecurity changes and incident response with the government. The role also handles cybersecurity exceptions and removable-media requests, participates in remanence security risk management, and documents reviews and audits.

The position requires at least three years of experience using security-relevant tools and applications in support of the Risk Management Framework (RMF), experience as an ISSO or ISSM supporting classified programs, and a current Top Secret clearance with SCI access or an active Secret clearance. Candidates must be U.S. citizens, hold the required governance, risk, and compliance certification, and be able to pass a government background check before employment.

Requirements

• At least 3 years of experience using security-relevant tools, systems, and applications in support of the Risk Management Framework (RMF), including NESSUS, ACAS, DISA STIGs, audit tools, ESS, eMASS, and PPS.
• Experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM) supporting classified programs.
• Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
• Must hold a certification in governance, risk, and compliance (CGRC).
• Must be a U.S. citizen.
• Must hold a current Top Secret clearance with SCI access (TS/SCI) or an active Secret clearance.
• Must be able to pass a government background check completed before employment.

Nice To Haves

• Prior system administrator or network operator experience with devices supported in the contract.
• IAM-I certification: CASP+, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, Security+ (CE), or SSCP.

Responsibilities

• Implement and enforce cybersecurity policies, procedures, and countermeasures.
• Ensure users have the required security clearances and need-to-know, complete annual cybersecurity training, and understand their responsibilities before system access is granted.
• Maintain authorized user access-control documentation.
• Ensure software, hardware, and firmware comply with applicable security configuration guidelines, such as security technical implementation guides and security requirement guides.
• Ensure configuration-management procedures are followed before implementation and that required approvals are obtained.
• Coordinate changes or modifications with the government.
• Coordinate protective or corrective measures with the government when a security incident or vulnerability is discovered.
• Report security incidents or vulnerabilities to designated representatives.
• Initiate exceptions, deviations, or waivers to cybersecurity requirements as needed.
• Participate in remanence security risk management processes.
• Process data loss prevention exemptions and removable-media whitelist requests.
• Document reviews of logs and audit trails at least weekly, or more frequently when required.
• Conduct removable-media audits at least annually and ensure logs clearly show two-person control activity for all actions.

Benefits

• Competitive salary.
• 401(k) program with company match.
• Comprehensive benefits package including health, vision, dental, life, and disability insurance.
• Generous paid time off package.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed