Information System Security Officer

AEVEX • Dayton, OH

1d • Onsite

About The Position

As an Information System Security Officer (ISSO) – Classified Systems, you will be responsible for maintaining the security posture and regulatory compliance of classified information systems and secure rooms in accordance with DoD regulations and the Risk Management Framework (RMF). This role ensures the confidentiality, integrity, and availability of classified information in a secure production environment.

Requirements

• Strong working knowledge of DoD RMF, NIST SP 800-53, CNSSI, and related security policies.
• Knowledge of access control procedures, media control, classified data handling, and COMSEC requirements
• Experience with Windows Server, Active Directory, endpoint security tools, and network security concepts
• Hands-on experience administering or monitoring security tools such as Splunk Enterprise
• Excellent written and verbal communication skills with strong documentation abilities.
• Ability to work effectively in a secure, compliance-focused environment.
• DoD 8570/8140 compliant certification (Security+, CISSP, or equivalent) required.
• 3+ years of ISSO or relevant DoD cybersecurity experience supporting classified systems.
• Hands-on experience with eMASS, ACAS, STIGs, and security documentation.
• Experience supporting classified environments and secure facilities.
• Active Secret clearance required; must be maintainable.
• U.S. Citizenship required.

Nice To Haves

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field preferred.

Responsibilities

• Maintain the security posture of the classified system and secure room, ensuring daily compliance with DoD, NIST, and RMF requirements.
• Manage RMF documentation including System Security Plan (SSP), Plan of Action and Milestones (POA&M), and continuous monitoring activities.
• Conduct vulnerability scanning, risk assessments, and remediation using tools such as ACAS and STIGs.
• Support Authority to Operate (ATO) packages, security incident response, and configuration management.
• Serve as the primary security Point of Contact (POC) for the system, working closely with system owners and authorizing officials.
• Perform classified material control, user access management, and security awareness activities.
• Perform other duties as required.
• Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
• Responsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices.
• Embodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.

Benefits

• 401(k)-retirement plan
• comprehensive Medical, Dental, Vision, Disability and Life insurance group coverage with a portion of the premiums paid by the company
• professional development funds
• Employee Assistance Plan (EAP) with counseling, legal help, child and elder care support

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level