Information Systems Security Officer

Torch Technologies, Inc.•Eglin Village, FL

2d•Onsite

About The Position

Torch Technologies is seeking an Information Systems Security Officer (ISSO) to join their team, supporting an Air Force Weapons effort at the 350th/SWW on Eglin AFB, FL. This role carries out all phases of information systems/networks security programs that involve access to computers and computerized data, enabling the company to meet contractual requirements for networks security. The ISSO will conduct regular audits to ensure systems are operated securely and that information systems security policies and procedures are implemented as defined in security plans. This position requires a deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and USAF-specific guidance.

Requirements

US Citizenship
Master's Degree in Computer Science, a related field or equivalent experience (12 years relevant experience in lieu of degree).
A minimum of 10 years of relevant experience.
Must maintain a DoW 8140 / 8570.01-M certification (Security + CE at the minimum).
Requires a final DoW Top Secret clearance at start of program and this level must be maintained throughout internship.

Nice To Haves

Deep understanding of the NIST RMF lifecycle, DoDI 8510.01, and USAF-specific guidance (e.g., AFI 101-17, Risk Management Framework for Air Force Information Technology).

Responsibilities

Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in security plans.
Develop, update, and manage Authorization to Operate (ATO) packages.
Navigate and maintain system records within the Enterprise Mission Assurance Support Service (eMASS).
Execute continuous monitoring strategies.
Review audit logs, analyze vulnerability scans, and verify system configuration baselines remain intact.
Implement, enforce, and assess NIST SP 800-53 security controls.
Apply and verify Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Utilize the Assured Compliance Assessment Solution (ACAS) to scan for, identify, and coordinate the remediation of system vulnerabilities.
Identify, report, and track cybersecurity incidents and data spills in accordance with USAF and DoW incident response directives.
Draft, review, and maintain System Security Plans (SSP), continuous tracking of Plan of Action and Milestones (POA&M), and system-specific operating procedures.