SITEC - ISSO - MacDill AFB

Peraton•Tampa, FL

7d•$104,000 - $166,000•Onsite

About The Position

Peraton is hiring an Information Systems Security Officer to support the Special Operations Command Information Technology Enterprise Contract (SITEC) 3 at MacDill Air Force Base, Florida. The role provides hands-on cybersecurity support for SOCOM systems, focusing on Risk Management Framework (RMF) lifecycle activities, continuous monitoring, vulnerability management, compliance reporting, and cybersecurity documentation. The position supports the security and integrity of federal and national security information systems, manages risk, and helps ensure compliance with applicable regulations and standards. It requires collaboration with technical and non-technical stakeholders and supports mission operations serving USSOCOM, its component commands, and Theater Special Operations Commands.

Requirements

Minimum experience and education combination: 12 years with a high school diploma, 10 years with an associate degree, 8 years with a bachelor's degree, 6 years with a master's degree, or 3 years with a Ph.D.
Active DoW TS/SCI clearance.
At least 3 years of relevant experience in IT risk management, information system security, and/or cybersecurity.
DoW 8140 compliant under Work Role Code 722, Information Systems Security Manager, at the Intermediate level or higher.
DoW 8570 IAT II certification or higher.
Experience with the Risk Management Framework (RMF) and NIST SP 800-53 and 800-37.
Experience creating and updating Security Assessment and Authorization artifacts, including FIPS 199, Contingency Plans, Contingency Plan Tests, and System Security Plans.
Knowledge and experience in IT risk and controls through IT audits, IT control assessments, and IT security reviews.
Working knowledge of FISMA, NIST SP 800 series, FISCAM, and other relevant federal information assurance laws, regulations, and guidance.
Experience performing FISMA, OMB Circular A-123, or similar internal control assessments.
Understanding of security frameworks such as FedRAMP and DISA DCAS.
Understanding of the DoD Cloud Computing Security Requirements Guide and DoD STIGs/SRGs, including experience with the STIG Viewer toolset.
Proficiency in eMASS.
Proficiency in Microsoft Excel, Word, and PowerPoint.

Responsibilities

Conduct IT risk management and controls assessments using government guidance, organizational policies, and procedures.
Conduct walkthrough interviews and communicate with client stakeholders, including subject matter experts such as system and database administrators.
Request, obtain, review, and analyze artifacts such as security plans, standard operating procedures, system screenshots, and configuration settings.
Evaluate the design and operating effectiveness of IT controls using artifacts, industry guidance, leading practices, and professional judgment.
Document IT control test results clearly and consistently so reviewers can reproduce the tests and conclusions.
Summarize and communicate assessment results to client stakeholders, including senior leaders.
Plan and execute day-to-day IT controls assessment activities independently and as part of a team.
Work with client personnel to analyze known IT control weaknesses, identify root causes, and develop remediation plans.
Provide subject matter expertise on IT controls and respond to ad hoc client requests.
Implement and manage continuous monitoring programs to maintain the security of information systems.
Support RMF lifecycle activities, vulnerability management, compliance reporting, and cybersecurity documentation development.

Benefits

Medical benefits
Dental insurance
Vision insurance
Life insurance
Health savings account
Short- and long-term disability
Employee assistance program
Parental leave
401(k)
Paid time off for vacation
Company-paid holidays
Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position