Information System Security Officer (ISSO)

The Greentree Group•Beavercreek, OH

5h•$100,000 - $150,000•Hybrid

About The Position

As a potential Information System Security Officer (ISSO), you will have the opportunity to work with cutting-edge technologies and collaborate with a talented team of professionals. This potential role will be critical in supporting our Customer at Wright Patterson Air Force Base. Join us and be part of our mission to make a difference!

Requirements

Bachelor’s degree in a related field or 6 years’ experience.
Knowledgeable of DoDI 8500.01 (Cyber Security), 8510.01 (Risk Management Framework for Air Force Information Technology), AFI 17-101(Risk Management Framework for Air Force Information Technology), and NIST SP 800-53 Security and Privacy Controls.
Active DoD 8140 IAM Level II certification (CASP+, CCNP Security, CISA, CISSP (or Associate), CCSP, GCED, or GCIH).
Knowledgeable with Enterprise Mission Assurance Support Service (eMASS) and associated artifacts and Plan of Actions & Milestone (POA&M) requirements.
Strong knowledge of IT security principles, network monitoring, operating systems, and security tools.
Strong customer service, interpersonal, and communication skills (written and verbal).
Good organizational, time management, analytical, and problem-solving skills.
Must be able to work as part of a team and individually, meeting tight deadlines.
Candidates must be U.S. Citizens and have the ability to obtain a secret clearance investigation in a timely manner.

Nice To Haves

Knowledgeable about Zero Trust tools and techniques including Identity, Credential, and Access Management (ICAM) efforts.
Ability to review and analyze for consistency, congruency, and in-depth due diligence.
Experience with Cloud environments and Cloud security tools.
Experience in software development environments including DevSecOps and tools such as the Atlassian suite (Jira, Confluence, etc).
Experience with security control evidence development.
Familiarity with Configuration Management and Configuration Control Boards.

Responsibilities

Create and implement Air Force security policies, procedures, and controls to protect information systems.
Conduct risk assessments and develop risk management plans to identify and mitigate vulnerabilities.
Configure cloud-based security tools to monitor networks, systems, and user activity for security breaches, analyze threats, and review security and audit logs.
Develop and perform continuous monitoring techniques and procedures.
Review and evaluate STIG and static code analysis scans for compliance and vulnerabilities.
Provide security guidance to technical and software development teams throughout the software development lifecycle (SDLC).
Ensure software, hardware, and user access controls comply with security configuration guidelines.
Report incidents or vulnerabilities and initiate counter measures and actions to restore cybersecurity posture.