Information System Security Officer

Odyssey Systems Consulting Group, Ltd.•Ogden, UT

2d•Onsite

About The Position

Odyssey is hiring a Journeyman Information System Security Officer (ISSO) to support the Air Force Life Cycle Management Center Armament Directorate Munitions Division (AFLCMC/EBH). The role supports the protection, accreditation, and ongoing security posture of Air Force information systems. Working closely with the Information System Security Manager (ISSM), the ISSO helps ensure systems meet DoD and Air Force cybersecurity requirements, align with the Risk Management Framework (RMF), and maintain the confidentiality, integrity, and availability of critical networks and data. The position involves conducting risk assessments, supporting authorization and accreditation activities, evaluating security controls, and helping enforce cybersecurity policies, configurations, and user access standards. It also includes monitoring vulnerabilities, assisting with incident response, maintaining compliance artifacts, and supporting secure system design. The position is onsite, with travel that may be required up to 10% depending on program needs.

Requirements

Must be a US citizen.
Must hold a current Secret clearance.
Must hold a current IAT Level II certification; listed examples include Security+, GSEC, CCNA-Security, Certified Systems Security Professional (CISSP), or a similar certification.
Must be able to maintain required cybersecurity certifications in accordance with AFMAN 17-1303.
Meet one of the following education and experience combinations: high school diploma or equivalent and 3 years of related experience; a bachelor's degree in a related discipline and 2 years of related experience; or a master's degree in a related discipline and 1 year of related experience. Each option also requires a current IAT Level II certification.
Knowledge of DoD and Air Force cybersecurity policies, directives, and compliance requirements.
Understanding of information assurance, cybersecurity principles, and practices for protecting confidentiality, integrity, and availability.
Ability to develop, maintain, and review cybersecurity documentation, artifacts, security plans, and accreditation packages.
Knowledge of system security architecture and secure system/network design principles.
Understanding of change-management processes and cybersecurity impact analysis.
Proficiency with security monitoring, vulnerability scanning, and cybersecurity management tools.
Excellent written communication skills for documentation, compliance artifacts, audit reports, and security findings.
Strong verbal communication skills and ability to explain technical cybersecurity concepts to technical and non-technical audiences.
Exceptional attention to detail and commitment to accuracy in compliance and documentation activities.
Strong analytical and problem-solving abilities for identifying risks and vulnerabilities and developing mitigation strategies.
Professionalism, integrity, and accountability when handling sensitive information.

Nice To Haves

Experience monitoring, identifying, analyzing, and mitigating cybersecurity vulnerabilities and threats.
Experience working in classified, sensitive, or mission-critical DoD environments.
Experience supporting DoD RMF authorization, accreditation, assessment, and continuous-monitoring activities.
Experience developing and reviewing contingency plans, disaster recovery plans, and continuity-of-operations documentation.
Experience maintaining system security posture and supporting continuous cybersecurity improvement.

Responsibilities

Ensure systems and applications meet DoD and Air Force cybersecurity requirements as directed by the ISSM.
Develop, implement, and maintain cybersecurity programs, policies, procedures, and security tools to protect systems, networks, and data.
Support RMF authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
Assist the ISSM with risk and vulnerability assessments for planned and operational information systems; identify security gaps and recommend mitigations.
Conduct security evaluations, audits, and reviews; support system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
Participate in system and network design to incorporate security controls and RMF activities.
Assist in collecting, analyzing, and preserving digital evidence related to cybersecurity incidents or policy violations.
Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement measures to improve or restore cybersecurity resilience.
Enforce Air Force cybersecurity policies, procedures, configuration guidelines such as STIGs/SRGs, and change-management processes.
Maintain and audit authorized user access documentation and ensure users meet clearance, need-to-know, and annual training requirements.
Report security incidents or vulnerabilities to the ISSM and support corrective or protective measures.
Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.