Information System Security Officer

Qualis LLC• Eglin Air Force Base, FL, US, FL

3d•Onsite

About The Position

Qualis LLC is seeking an Information System Security Officer (ISSO) to support the Guided Weapons Evaluation Facility (GWEF) performing Advisory and Assistance Support (A&AS) functions for the 782 Test Squadron (782 TS). Specific duties include, but are not limited to: auditing, conducting Security Impact Analysis (SIA) documentation, updating/maintaining artifacts for Authority to Operate (ATO) packages via Enterprise Mission Assurance Support Service (e-MASS) and other systems, reviewing quarterly Plan of Actions and Milestones (POA&Ms), conducting Continuous Monitoring (CONMON) tasks, and overseeing media control efforts. This onsite position is located at Eglin AFB, FL.

Requirements

Bachelor's degree in Computer Science or other relevant field with 0-3 years’ experience. Experience may be substituted for education with government approval.
Must meet the position and certification requirements outlined in DoD Directive 8140 / 8570.01-M for Information Assurance Management (IAM) Level I (e.g., Security+CE or equivalent foundational certification).
Knowledge and expertise in Cybersecurity requirements, technologies, and computer security as applied to DoD networks.
Robust working knowledge of NIST 800-53 (Rev 5) controls and Risk Management Framework (RMF) process.
Must hold an active DoD/DoW TOP SECRET Security Clearance with last investigation within 6 years.
Basic understanding of Microsoft Windows and Red Hat Enterprise Linux Operating Systems (OS) environments.
Familiarity/proficiency with processes and functions, information technology hardware and software products, as well as computer peripherals (e.g., printers, monitors, hard drives, docking stations, scanners, etc.).
Excellent verbal and written communication skills along with customer interaction and presentation capabilities.

Nice To Haves

Demonstrates familiarity or experience with Experience with Defense Information Systems Agency (DISA) STIGs, SCAP Compliance Checker (SCC), STIG Viewer / evaluateSTIG, Host Base Security System (HBSS), and ACAS is highly preferred.
Experience developing SOPs, SSPs, POA&Ms, and other DoD/DoW documentation.
Basic understanding of Windows PowerShell and Python scripting (desired).
Basic understanding of DNS, DHCP, TCP, UDP, Layer 2 and Layer 3 (desired).
Exceptionally qualified candidates will be considered with a current SECRET Clearance for upgrade to Top Secret.

Responsibilities

Ensure the confidentiality, integrity, and availability of unclassified and classified Information Systems (ISs) and data using Air Force (USAF) approved information security standards and approved industry best practices.
Provide cybersecurity support for various test area systems to include real-time, standalone, and networked systems.
Evaluate approved new technologies prior to implementation within the organizational environment.
Provide cybersecurity support for application development, planning, network implementation, systems integration, communication support, computer-communication maintenance, asset management, and security controls.
Assist the government in producing, maintaining, and revising Standard Operating Procedures (SOP), System Security Plans (SSP), POA&Ms, and Authorization to Operate (ATO) supporting Bodies of Evidence (BoE) documentation.
Maintain critical cybersecurity artifacts and BoEs within e-MASS, conducting robust continuous monitoring activities to ensure the retention of active ATOs.
Perform security scans and analysis using DISA Security Technical Implementation Guide (STIG) and Assured Compliance Assessment Solution (ACAS) to ensure systems security settings and patch levels are compliant.
Perform generation, collection, and preservation of IS audit logs in accordance with the SSP and USAF requirements.
Monitor and document system changes in accordance with Configuration Management Policy and applicable SSPs.
Perform hardware and software SIA documentation and vulnerability analysis.
Media Control management to include documentation, issuance, destruction, and accountability of all media.