Information System Security Officer

Galapagos Federal Systems LLC.•Patrick AFB, FL

4d•$110,000 - $120,000•Onsite

About The Position

Galapagos Federal Systems, LLC is seeking an Information System Security Officer (ISSO) supporting the U.S. Space Training and Readiness Command (STARCOM) at Patrick Space Force Base, Florida. This position supports the security and compliance of classified information systems within mission-critical environments. The selected candidate will assist in maintaining the operational security posture of assigned systems by working closely with the Information System Security Manager (ISSM), Information System Owner (ISO), and system administrators to ensure compliance with Department of Defense (DoD), Intelligence Community (IC), and U.S. Space Force cybersecurity requirements, policies, and procedures. The ideal candidate will have hands-on experience supporting day-to-day cybersecurity operations, including vulnerability management, security compliance, continuous monitoring, and system authorization activities. This role supports systems operating in Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments and requires a strong understanding of cybersecurity best practices, security controls, and risk management principles.

Requirements

Active Top Secret clearance with SCI eligibility
5+ years of relevant DoD cybersecurity experience, including at least 2 years supporting SAP and/or SCI environments
Ability to obtain and maintain a Counterintelligence Scope Polygraph (CI Polygraph), if required
Working knowledge of the Risk Management Framework (RMF) and experience supporting system authorization and continuous monitoring activities
Familiarity with DoD cybersecurity policies and procedures, including configuration management, vulnerability management, audit review, and incident response processes
Experience coordinating hardware, software, and firmware changes with ISSMs and authorizing officials prior to implementation
Knowledge of media handling procedures, including clearing, sanitizing, and destruction of hardware and storage media in accordance with approved security standards
Ability to analyze audit records, identify anomalies, and support incident response and remediation efforts
Experience supporting cybersecurity inspections, compliance assessments, and system security reviews
Strong analytical, organizational, and problem-solving skills with attention to detail
Excellent written and verbal communication skills, including the ability to clearly document findings and communicate security requirements to technical and non-technical stakeholders
Ability to work independently while collaborating effectively with system administrators, engineers, and cybersecurity personnel
Commitment to maintaining current technical and cybersecurity knowledge through ongoing training and professional development
Must be a U.S. Citizen.
A high-level Department of Defense active security clearance is/may be required. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to government information.

Nice To Haves

Previous experience supporting Communications Security (COMSEC) activities preferred

Responsibilities

Conduct and support information system security operations, including physical and environmental protection, personnel security, incident response, and security awareness activities
Work closely with the Information System Security Manager (ISSM) and Information System Owner (ISO) to ensure information systems and operating environments remain compliant with applicable security requirements
Assist in the development, maintenance, and management of system authorization documentation and configuration management processes within approved authorization boundaries
Review proposed configuration changes, assess potential security impacts, and provide risk mitigation recommendations to the ISSM
Support the design, implementation, and maintenance of secure system architectures, including physical and logical system topologies
Identify cybersecurity vulnerabilities and support remediation efforts through implementation of corrective actions and countermeasures
Maintain accurate and current security documentation, ensuring accessibility to authorized personnel
Conduct periodic system reviews and support continuous monitoring activities to maintain compliance with approved authorization packages
Collect, analyze, and document audit logs and security events, identifying anomalies and reporting potential security concerns
Support system recovery and restoration efforts, ensuring security safeguards and controls are properly implemented following recovery activities
Assist with cybersecurity inspections, assessments, and self-inspection activities, including coordination of assessment plans and supporting documentation
Prepare reports and provide status updates on system security controls, compliance posture, and identified risks to the ISSM and program leadership
Support temporary Communications Security (COMSEC) responsibilities, as required