Information System Security Manager

Qualis LLC• Eglin Air Force Base, FL, US, FL

1d•Onsite

About The Position

Qualis LLC is seeking an Information System Security Manager (ISSM) to support operations at Eglin AFB, FL. This role involves developing, coordinating, and implementing strategies for the reliable and secure operation, evolution, and growth of the automation hardware and software infrastructure. The ISSM will be responsible for managing cybersecurity safeguards while maintaining operational capabilities, including assessing and updating STIGs, scanning systems with SCAP, patching information systems, and utilizing ACAS or Nessus for vulnerability identification. Additionally, the ISSM will ensure necessary training for ISSOs and other AIS personnel, review and manage information system documentation, provide configuration management for security-relevant components, and ensure system security assessments and audits are completed and documented. The role also requires certifying that all AIS authorization documentation is current and accessible.

Requirements

Bachelor degree in Computer Science or other relevant field, and 3-10 years of relevant experience.
Experience may be substituted for education with government approval.
Must hold an active DoD Secret Security clearance with the ability to upgrade to a Top Secret if needed.
Candidate must be able to obtain and maintain an Cybersecurity Professional certification. Must be compliant with DoD 8140 with IAM level II certification.
Ability to troubleshoot and diagnose system problems required.
Must understand the specific procedures and processes of the Air Force Test Center and DoD regulations and guidelines.
Excellent verbal and written communication skills along with customer interaction and presentation capabilities required.
Must exemplify a dedication to achieving the mission of the 96 MXG as well as high standards of quality and excellence in performing the duties.
Must be able to work effectively alone, unsupervised, or within a group
Must be able to work in a dynamic environment while being able to prioritize work to balance multiple projects and deadlines.
Must be willing to travel up to 10%.
US Citizenship required.

Nice To Haves

System Administration experience highly desirable.
Extensive understanding of Microsoft Operating Systems (OS) environments (is desired)

Responsibilities

Development, Coordination, and Implementation of short and long term strategies for reliable and secure operation, evolution, and growth of the automation hardware and software infrastructure.
Must have experience with the JSIG progress for Assessment and Authorization, Body of Evidence, and Continuous Monitoring requirements, which includes, but not limited to, maintenance logs, account management, malicious code, vulnerability scans, and weekly security audits, for classified systems.
Implement cybersecurity safeguards while maintaining operational capabilities. This includes assessing and updating applicable Security Technical Implementation Guides (STIG), using the Security Content Automation Protocol (SCAP) to scan systems, patching information systems and familiarity with the Assured Compliance Assessment Solution (ACAS) or the Nessus Essentials Vulnerability Scanner (free version) application used to identify system vulnerabilities.
Ensure that all ISSOs, and other AIS personnel receive the necessary technical and security training to carry out their duties.
Review, edit and prioritize information system documentation (SSPs, SCTMs, Certification Test Procedures, Plans of Action & Milestones, Risk Assessment Reports, CONOPS, ancillary plans).
Provide CM for security-relevant information system software, hardware and firmware.
Ensures system security assessments and audits are completed and documented.
Certify that all AIS authorization documentation is current and accessible to authorized individuals