Information Systems Security Officer

Fidelity Partners•San Antonio, TX

2d•Onsite

About The Position

The Information Systems Security Officer (ISSO) provides system-level cybersecurity and Risk Management Framework (RMF) support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory (TSRL), within the Air Force Research Laboratory’s 711th Human Performance Wing, Bioeffects Division. The role performs DoD 8140 work role 721 functions and supports system authorization, compliance, vulnerability management, documentation, access control, audits, training, and customer service. This is one of two full-time positions, contingent upon contract award, primarily on-site at the Tri-Service Research Laboratory at Joint Base San Antonio–Fort Sam Houston in San Antonio, Texas. The normal schedule is Monday through Friday between 7:00 a.m. and 5:00 p.m., not exceeding 40 hours per week; after-hours support may be required for specific tasks. The base period is November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8. Estimated total compensation is $56.63 per hour. No travel is anticipated. Temporary alternate work locations may be assigned by the COR; general telework authorization is not specified. U.S. citizenship is required for contractor personnel needing access to USAF bases, AFRL facilities, or Government IT networks unless the Contracting Officer approves a written waiver. A current Secret clearance is highly desired and is required for personnel who need classified-information or IT-II access; Secret is the highest classification level. The position requires an associate degree in Information Technology or Cybersecurity, at least one year of demonstrated RMF and cybersecurity experience, and a current CompTIA Security+ certification. The employee must meet applicable DoD Manual 8140.03 qualifications and execute a nondisclosure agreement before starting performance.

Requirements

Associate of Science degree or higher in Information Technology or Cybersecurity.
At least one year of demonstrated experience performing RMF requirements and cybersecurity services.
Current, valid CompTIA Security+ certification.
Meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.
Execute a nondisclosure agreement before the start of performance.
U.S. citizenship for personnel requiring access to USAF bases, AFRL facilities, or Government IT networks, unless a written waiver is approved by the Contracting Officer.
A Secret clearance is required for duties involving classified information or IT-II access.
Submit a resume not exceeding five pages that documents at least one year of RMF/cybersecurity experience.
Submit a copy of the qualifying associate degree or higher and current Security+ certification.
Submit evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held.
Submit a wet-signed Letter of Intent.
Complete security, identity, CAC, network-access, training, onboarding, and other documents requested by Fidelity Partners or the Government/client.

Nice To Haves

A current Secret clearance is highly desired.

Responsibilities

Perform ISSO and DoD 8140 work role 721 responsibilities for assigned classified and unclassified systems and enclaves.
Implement, assess, monitor, and document security controls and assessment procedures; support ongoing system authorization and continuous monitoring.
Maintain eMASS records, ATO documentation, vulnerability findings, STIG results, remediation actions, system inventories, and supporting evidence.
Coordinate with system owners, administrators, technicians, Government leads, and other cybersecurity personnel to resolve compliance and access issues.
Provide cybersecurity guidance, user support, training coordination, audit preparation, inspection support, and vulnerability-remediation tracking.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and RMF requirements.
Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.
Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware and software inventories, standard operating procedures, and related evidence packages.
Use ACAS or other approved scanning tools to identify and assess vulnerabilities; maintain STIG checklists and documented remediation plans.
Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.
Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.
Provide cybersecurity consulting and customer support; participate in the AFRL Cybersecurity Working Group; prepare meeting minutes and track actions; brief Government and industry stakeholders.
Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.
Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.