Information System Security Officer, Journeyman

Applied Research Solutions•Hill Afb, UT

About The Position

Applied Research Solutions (ARS) is seeking a Journeyman Information System Security Officer to support Department of the Air Force information systems and cybersecurity operations at Hill AFB in Ogden, Utah. The role helps maintain the operational security posture of assigned information systems and Platform Information Technology (PIT), supporting Risk Management Framework (RMF) authorization activities, security control documentation, vulnerability and risk assessments, continuous security monitoring, and cybersecurity policy compliance. The ISSO works with the Information System Security Manager (ISSM), system owners, and technical teams to safeguard system, network, and data confidentiality, integrity, and availability under applicable DoD and Air Force cybersecurity requirements. ARS describes itself as a provider of technically integrated solutions and mission support. The company says it prioritizes employees, supports career goals and work/life balance, and offers an industry-competitive benefits package, an awards and recognition program, and personalized attention from senior managers. The position requires U.S. citizenship, an active Top Secret clearance, and one of the specified Journeyman education and experience paths. All paths require IAT Level II qualification. Employment is contingent on successful completion of a background investigation, including criminal history and identity checks.

Requirements

Must be a U.S. citizen.
Must hold an active Top Secret clearance.
Meet one Journeyman education/experience path: at least 3 years of relevant experience; or a bachelor's degree in an interdisciplinary/relevant discipline (IRD) and at least 2 years of relevant experience; or a master's degree in an IRD and at least 1 year of relevant experience.
All education/experience paths require IAT Level II qualification.
Maintain a current DoD IAT Level II qualification/certification appropriate to the assigned role under DoD Manual 8140.03 and applicable successor guidance; the Unit ISSM determines role-specific qualification applicability.
Working knowledge of DoD RMF, system authorization and accreditation, security control implementation, assessment evidence, security authorization artifacts, and continuous monitoring.
Experience assessing information system security risks and vulnerabilities; conducting reviews or audits; documenting findings; and recommending mitigation or corrective actions.
Knowledge of applicable DoD and Air Force cybersecurity policy, including DoDI 8510.01, AFI 17-101, AFI 17-130, and AFMAN 17-1303, as applicable to the supported environment.
Journeyman-level ability to work independently within established procedures, troubleshoot security issues, coordinate with ISSMs and technical teams, and communicate technical risks and requirements clearly.
Must successfully complete a background investigation, including criminal history and identity checks.

Responsibilities

Support RMF assessment and authorization activities for information systems and PIT, including preparing, reviewing, and maintaining security documentation, evidence, artifacts, and authorization packages.
Maintain the cybersecurity posture of assigned systems by implementing and monitoring DoD and Air Force information security requirements, controls, processes, and procedures.
Assist the ISSM with risk and vulnerability assessments; identify security gaps, evaluate risks, track corrective actions, and recommend mitigations.
Conduct system security evaluations, audits, compliance reviews, and security control assessments; support continuous monitoring and remediation of findings.
Develop, update, and maintain system security policies, procedures, configuration documentation, and RMF artifacts; support security requirements during system and network design and changes.
Work with the ISSM to develop system-specific security contingency plans, incident response coordination procedures, and disaster recovery documentation.
Support user cybersecurity awareness and adherence to security policies, and help implement safeguards against unauthorized access.
Coordinate with system administrators and IT teams on secure configuration, configuration management, technical implementation planning, baseline controls, troubleshooting, and protection of Windows, Linux, classified and unclassified, and applicable cloud or network environments.
Support investigation-related evidence collection, analysis, and preservation as directed.
Coordinate cybersecurity activities and communicate security risks and status to authorized Government and contractor stakeholders.
Perform other related information assurance, system administration coordination, and cybersecurity duties in accordance with the PWS, and other duties as assigned.