Information Systems Security Officer (ISSO)

ProSource360 Consulting Services, Inc•San Antonio, TX

10d•Onsite

About The Position

ProSource360 Consulting Services, Inc. is seeking an Information Systems Security Officer to provide day-to-day cybersecurity and Risk Management Framework (RMF) support for the Tri-Service Research Laboratory (TSRL). Two ISSOs will support systems, networks, and standalone enclaves across NIPRNet, DREN, RDT&E, SIPRNet, and related environments. The role maintains cybersecurity documentation and eMASS records, supports vulnerability scanning and remediation tracking, and coordinates account access. The position supports RMF activities, Authorization to Operate (ATO) maintenance, audits and inspections, user support, and cybersecurity initiatives involving cloud services and enterprise IT pilots. It is an on-site role at JBSA–Fort Sam Houston in San Antonio, Texas, with a specified start date of November 30, 2026. Occasional after-hours tasks and authorized couriering of classified equipment or media may be required.

Requirements

Associate of Science degree in Information Technology or Cybersecurity; a copy of the degree or transcript must be provided.
At least one year of demonstrated experience working with RMF requirements and providing cybersecurity services.
Current, valid CompTIA Security+ certification; verification information and expiration date must be provided.
Education, training, or certifications meeting applicable DoDM 8140.03 requirements for DoD 8140 work role 721 (ISSO); candidates should identify relevant certifications held.
Demonstrated intermediate-level cybersecurity work-role experience; entry-level experience alone does not meet the stated requirement.
Ability to obtain and maintain the required SECRET clearance and Government access; an active SECRET clearance is strongly preferred due to classified/SIPRNet duties.
Ability to support occasional after-hours tasks and courier classified equipment or media within TSRL when required.
Ability to work on-site at JBSA–Fort Sam Houston in San Antonio, Texas, and to start November 30, 2026.

Nice To Haves

Active SECRET clearance and an existing CAC or recent DoD background investigation.
Experience with eMASS data entry, cybersecurity package documentation, and artifact management.
Experience with ACAS vulnerability scanning and STIG checklists.
Experience coordinating account management, DD Form 2875 routing, and user onboarding/offboarding.
Experience supporting DREN, RDT&E, research-laboratory environments, or classified SIPRNet networks.
Bachelor’s degree or additional cybersecurity certifications beyond Security+.

Responsibilities

Support RMF activities and ATO maintenance in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01, and related directives.
Enter, update, and monitor system information and cybersecurity documentation in eMASS, ITIPS, and the AFRL RMF Workflow.
Prepare and maintain System Security Plans, Security Assessment Reports, POA&Ms, risk assessments, topology diagrams, hardware/software inventories, and security procedures.
Conduct or support vulnerability scanning using ACAS or other Air Force-approved tools; review findings and track remediation.
Maintain STIG hardening checklists and support corrective actions resulting from audits, inspections, and vulnerability findings.
Support IAVM dissemination, reporting, and compliance tracking.
Assist with configuration management reviews, internal and external audits, inspections, and AFRL Inspector General pre- and post-inspection activities.
Coordinate user account onboarding and offboarding, including routing DD Form 2875 and related access documentation.
Track cybersecurity training compliance and assist with maintaining DoD 8140 certification and training records.
Provide cybersecurity customer support, including policy interpretation, configuration guidance, and responses to user questions.
Support cloud cybersecurity activities and enterprise IT pilot projects involving virtualization, collaborative systems, mobile technologies, cloud services, and automation.
Assist with MOAs, MOUs, and AOR letters supporting the RMF Accreditation Program.
Support monthly AFRL Cybersecurity Working Group activities, including roll call, meeting notes, action tracking, and documentation.
Schedule and complete quarterly media destruction and courier classified equipment or media within TSRL when required and authorized.