Information System Security Officer, Journeyman

Applied Research Solutions•Hill Afb, UT

3d•Onsite

About The Position

ARS is seeking an Information System Security Officer (ISSO) to support Department of the Air Force information systems and cybersecurity operations at Hill AFB in Ogden, Utah. The ISSO will help maintain the operational security posture of assigned information systems and Platform Information Technology (PIT), supporting Risk Management Framework (RMF) authorization activities, security control documentation, vulnerability and risk assessments, continuous security monitoring, and cybersecurity policy compliance. Working with the Information System Security Manager (ISSM), system owners, and technical teams, the selected candidate will safeguard the confidentiality, integrity, and availability of systems, networks, and data in accordance with applicable DoD and Air Force cybersecurity requirements.

Requirements

Must be a US citizen
Active Top Secret clearance required.
Meet one of the Journeyman education/experience paths: (1) at least 3 years of relevant experience; OR (2) bachelor’s degree in an interdisciplinary/relevant discipline (IRD) plus at least 2 years of relevant experience; OR (3) master’s degree in an interdisciplinary/relevant discipline (IRD) plus at least 1 year of relevant experience. All paths require IAT Level II qualification.
Maintain a current DoD IAT Level II qualification/certification appropriate to the assigned role in accordance with DoD Manual 8140.03 and applicable successor guidance; the Unit ISSM determines role-specific qualification applicability.
Working knowledge of DoD RMF, system authorization and accreditation, security control implementation, assessment evidence, security authorization artifacts, and continuous monitoring.
Experience assessing information system security risks and vulnerabilities; conducting reviews or audits; documenting findings; and recommending mitigation or corrective actions.
Knowledge of applicable DoD and Air Force cybersecurity policy, including DoDI 8510.01, AFI 17-101, AFI 17-130, and AFMAN 17-1303, as applicable to the supported environment.
Demonstrated Journeyman-level ability to work independently within established procedures, troubleshoot security issues, coordinate with ISSMs and technical teams, and communicate technical risks and requirements clearly.

Responsibilities

Support RMF assessment and authorization (A&A) activities for information systems and Platform Information Technology (PIT), including preparation, review, and maintenance of security documentation, evidence, artifacts, and authorization packages.
Maintain an appropriate cybersecurity posture for assigned systems by implementing and monitoring DoD and Air Force information security requirements, controls, processes, and procedures.
Assist the ISSM with risk and vulnerability assessments of planned and operational systems; identify security gaps, evaluate risks, track corrective actions, and recommend mitigations.
Conduct system security evaluations, audits, compliance reviews, and security control assessments; support continuous monitoring and remediation of identified findings.
Develop, update, and maintain system security policies, procedures, configuration documentation, and RMF artifacts; support security requirements throughout system and network design and changes.
Work with the ISSM to develop system-specific security contingency plans, incident response coordination procedures, and disaster recovery documentation.
Support user cybersecurity awareness and adherence to established security policies; help implement safeguards to protect systems, networks, and data from unauthorized access.
Coordinate with system administrators and IT teams on secure configuration, configuration management, technical implementation planning, baseline controls, troubleshooting, and protection of Windows, Linux, classified/unclassified, and applicable cloud or network environments.
Support investigation-related evidence collection, analysis, and preservation as directed; coordinate cybersecurity activities and communicate security risks and status to authorized Government and contractor stakeholders.
Perform other related information assurance, system administration coordination, and cybersecurity duties in accordance with the PWS.
Other duties as assigned.