Information System Security Officer (ISSO)

C3EL•Offutt AFB, NE

6d•Onsite

About The Position

C3EL is seeking two Information System Security Officers (ISSOs) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support to the 55th Communications Squadron (55 SCS) at Offutt AFB. This role directly supports sustainment of Authorization to Operate (ATO) posture for the Defense Red Switch Network (DRSN), associated NC3 mission systems, and 55 SCS equipment operating within TS/SCI-controlled facilities. The ISSO will execute and manage RMF activities, accreditation artifact development, control validation, audit preparation, and continuous monitoring activities in accordance with Government direction, ensuring inspection-ready compliance and preservation of DRSN authorization posture.

Requirements

U.S. Citizenship
An active, in-scope US Government issued Top Secret/SCI clearance
Current DoD 8570/8140 (IAT II/IAM II or higher, e.g., Security+ CE, CISSP, CAP, SecurityX)
Minimum four (4) years of cybersecurity and RMF execution experience
Experience sustaining Authorization to Operate (ATO) packages
Strong familiarity with NIST SP 800-53 security controls and RMF processes
Experience supporting XACTA IA Manager required
Requires an Associate’s degree in Cybersecurity, Information Technology, or related field. (Relevant experience may be considered in lieu of formal education.)

Nice To Haves

Experience working in classified TS/SCI environments preferred
Working knowledge of vulnerability scanning tools such as ACAS
Experience supporting eMASS or similar RMF workflow platforms preferred

Responsibilities

Provide on-site cybersecurity and RMF sustainment support for DRSN and associated 55 SCS systems
Execute and manage RMF packages within XACTA IA Manager and Government-directed workflow platforms
Develop and maintain A&A artifacts including SSPs, POA&Ms, SARs, risk assessments, control implementation statements, and supporting documentation
Maintain control-to-evidence traceability and validate security control implementation in accordance with NIST SP 800-53
Support ACAS-based vulnerability scanning and continuous monitoring activities
Conduct and document risk assessments and update POA&Ms to support ATO sustainment
Maintain inspection-ready accreditation artifacts and support semi-annual ORSMO and Government reviews
Coordinate updates to system security documentation, network diagrams, rack elevations, and equipment inventories
Participate in cybersecurity working groups, stakeholder meetings, and provide meeting minutes when required
Perform monthly audit file backups and document objective evidence in accordance with Government procedures
Report cybersecurity task status and provide inputs to Monthly Status Reports