Information System Security Officer (ISSO)

Sawdey Solution Services•Wright Patterson AFB, OH

9d•Hybrid

About The Position

The Cybersecurity/Information System Security Officer (ISSO) provides Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and oversees day-to-day cybersecurity operations and Risk Management Framework (RMF) activities for assigned information systems, including classified and cross-domain environments at the Secret level and below. The role ensures compliance with DoDI 8510.01, AFI 17-101, and applicable Air Force Research Laboratory (AFRL) RMF guidance and policies. The position is located at Wright-Patterson Air Force Base, with telework or work from home authorized when authorized, in a hybrid arrangement. The ISSO supports implementation, documentation, assessment, and testing of Information Assurance security controls; maintains RMF documentation and security artifacts; conducts and supports vulnerability assessments and DISA STIG compliance reviews; coordinates remediation; and supports IATT and ATO processes in coordination with the ISSM, Authorizing Official, and other stakeholders. Assigned systems may include networks, laboratories, flight-test environments, and CDS, including classified, Secret-and-below, and, when assigned, SCI environments. The role collaborates with the RYZT Combat ID, Blue Guardian, Test, and RYSIL teams on cross-domain solutions supporting secure integration of data at multiple classification levels, multi-sensor data fusion and testing, data repositories, and network architecture requirements. The ISSO may also support proposal development and perform other duties as assigned. The position requires a current DoD 8570 IAT Level II or III certification, a Top Secret/SCI clearance, and U.S. citizenship.

Requirements

Experience performing ISSO, cybersecurity, information assurance, or RMF support duties.
Technical knowledge of cross-domain solutions and ability to work with engineers to develop them.
Familiarity with DoD and Air Force security and cybersecurity guidance.
Awareness of DISA STIGs, the ACAS vulnerability scanner, and the Air Force Ports, Protocols, and Services process.
Familiarity with the RMF process, including NIPR/SIPR eMASS and AFRL processes.
Technical understanding sufficient to discuss computer and network issues.
Familiarity with Air Force TEMPEST policies and processes.
Current DoD 8570 IAT Level II or III certification; examples listed include Security+ CE, SSCP, GSEC, CISSP, CISA, and CASP.
Working knowledge of DoDI 8510.01, AFI 17-101, applicable AFRL guidance, and customer-specific RMF procedures.
Experience with eMASS, Xacta, or comparable RMF workflow tools.
Experience with DISA STIGs, ACAS or comparable vulnerability scanning, and POA&M management.
Ability to prepare and maintain RMF artifacts and explain security findings to technical and nontechnical stakeholders.
Ability to communicate effectively with the customer and fulfill contract duties and responsibilities.
Proficiency in Microsoft Office, including Word, PowerPoint, Excel, and Outlook.
Top Secret/SCI security clearance.
U.S. citizenship.

Nice To Haves

Xacta experience, particularly if involved in RMF for TS/SCI.

Responsibilities

Serve as the assigned ISSO for one or more information systems, networks, laboratories, flight-test environments, or Cross Domain Solutions.
Support implementation, documentation, assessment, and testing of applicable security controls in accordance with RMF.
Develop, update, and maintain RMF documentation and security artifacts in eMASS, Xacta, EBS, or other customer-designated systems, including SSPs, SARs, POA&Ms, security control implementation statements, network diagrams, inventories, ports/protocols/services documentation, and compliance evidence.
Conduct and coordinate vulnerability scans, ACAS reviews, and DISA STIG assessments; analyze findings, assess impacts, and recommend corrective actions.
Track remediation activities, security control deficiencies, and POA&M milestones, escalating unresolved risks and overdue actions to the ISSM.
Support IATT, ATO, reauthorization, continuous monitoring, and customer inspections, ensuring security documentation and evidence are complete and current.
Collaborate with system owners, program managers, engineers, network architects, and cybersecurity personnel to maintain system security compliance throughout the system lifecycle.
Support security assessments of cross-domain technologies, including guards, diodes, and associated network interfaces.
Work with the RYZT Combat ID, Blue Guardian, Test, and RYSIL teams to develop and implement cross-domain security solutions.
Support secure integration of Top Secret, Secret, and unclassified data into consolidated products for flight tests and demonstrations.
Facilitate multi-sensor data fusion, integration, and testing through a common data bus in systems integration laboratories and aircraft-mounted sensor pods.
Support development of data repositories for multi-level sensor models and associated data.
Identify network architecture and infrastructure requirements for the RY digital strategy, including connectivity to other RY networks and associated hardware.
Prepare RMF documentation required to obtain IATTs and ATOs for laboratory, flight, and field testing.
Assist with proposal development as required.
Perform other duties as assigned.