ISSM Security Manager

Astrion•Eglin Air Force Base, FL

11d•Onsite

About The Position

Astrion is hiring an Information System Security Manager (ISSM) to support the 96 Test Wing under the Air Force Division at Eglin AFB, Florida. The ISSM provides advice and assistance in implementing cybersecurity safeguards and develops, coordinates, and implements short- and long-term security strategies throughout the system development lifecycle. The role supports classified information systems and data, authorization activities, security documentation, configuration and access control, vulnerability management, and collaboration with cybersecurity professionals, system administrators, program managers, and other stakeholders.

Requirements

Active DoD Secret security clearance.
10 or more years of experience as an ISSM, ISSE, ISSO, system administrator, or network administrator; additional experience may be substituted for the degree requirement.
Master’s degree in an applicable discipline, with additional experience potentially substituted for the degree.
DoD 8140 Advanced Proficiency Certification for ISSM or a related position.
Experience with the system security engineering lifecycle for DoW/DAF programs, including integrating security into acquisition from requirements definition through verification testing and deployment.
Experience with DoW/DAF cybersecurity requirements and Risk Management Framework authorization processes.
Experience managing and executing cybersecurity incident response processes and reporting requirements.
Experience with eMASS, ACAS, and endpoint security tools such as ESS or the Microsoft Defender Suite for Endpoint/Server.
Experience managing, executing, and reporting on cybersecurity continuous-monitoring requirements, including implementing and monitoring STIG requirements.

Nice To Haves

Active Top Secret DoD security clearance.

Responsibilities

Advise and assist with implementing cybersecurity safeguards and developing, coordinating, and implementing security strategies throughout all phases of the system development lifecycle.
Develop, assess, write, manage, and maintain Interim Authority to Test (IATT), Authority to Operate (ATO), and Security Impact Analysis (SIA) documentation.
Oversee implementation of Security Technical Implementation Guide (STIG) requirements and interpret and integrate applicable policies, instructions, and procedures in accordance with Security Classification Guides (SCGs).
Maintain a DoD 8140 Advanced Proficiency Certification for an ISSM or related position.
Protect the confidentiality, integrity, and availability of classified information systems and data using DoW/DAF-approved security engineering standards, industry best practices, and new technologies.
Advise and assist the Government with initial and recurring system or network authorization at the protection level directed by the cognizant authority.
Develop and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POA&Ms).
Support the Assessment and Authorization process by preparing systems for assessment, working with assessors to identify vulnerabilities, developing and implementing corrective action plans, and presenting systems to the Authorizing Official for approval.
Ensure information systems are securely configured and that changes are properly authorized and documented.
Manage information-system access controls so only authorized users can access sensitive data.
Identify, assess, and mitigate system vulnerabilities, including conducting scans, applying patches, and implementing other protective measures.
Collaborate with cybersecurity professionals, system administrators, program managers, and other stakeholders, communicating effectively with technical and non-technical audiences.