Information Systems Security Officer

Fidelity Partners•San Antonio, TX

13d•Onsite

About The Position

The Information Systems Security Officer (ISSO) provides system-level cybersecurity and Risk Management Framework (RMF) support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting the Tri-Service Research Laboratory. The role performs DoD 8140 work role 721 functions and supports authorization, compliance, vulnerability management, documentation, access control, audits, training, and customer service. This is a full-time position contingent upon contract award, primarily on-site at the Tri-Service Research Laboratory at Joint Base San Antonio–Fort Sam Houston in San Antonio, Texas. Work is normally Monday through Friday between 7:00 AM and 5:00 PM, not to exceed 40 hours per week; after-hours support may be required for specific tasks. The base period is November 30, 2026 through November 29, 2027, with a possible extension under FAR 52.217-8. No travel is anticipated. A current Secret clearance is highly desired and is required for personnel whose duties require classified-information or IT-II access. U.S. citizenship is required for contractor personnel needing access to USAF bases, AFRL facilities, or Government IT networks unless a written waiver is approved. Fidelity Partners provides medical, technical, logistical, and administrative services to federal government and commercial clients. The company offers competitive salaries and benefits packages and is an equal opportunity employer.

Requirements

Associate of Science degree or higher in Information Technology or Cybersecurity.
At least one year of demonstrated experience performing RMF requirements and cybersecurity services.
Current, valid CompTIA Security+ certification.
Meet applicable DoD Manual 8140.03 education, training, certification, and intermediate-level work-role requirements for the assigned labor category.
Execute a nondisclosure agreement before the start of performance.
U.S. citizenship for contractor personnel requiring access to USAF bases, AFRL facilities, or Government IT networks, unless a written waiver is approved by the Contracting Officer.
A Secret clearance is required before performing duties involving classified information, SIPRNet, or IT-II access.
Submit a resume not exceeding five pages that documents at least one year of RMF/cybersecurity experience.
Submit a copy of the qualifying associate degree or higher and current Security+ certification.
Submit evidence of applicable DoD 8140.03 work-role qualifications and current Secret clearance, if held.
Submit a wet-signed Letter of Intent.
Provide any security, identity, CAC, network-access, training, or onboarding documents requested by Fidelity Partners or the Government/client.

Nice To Haves

A current Secret clearance is highly desired.

Responsibilities

Perform ISSO and DoD 8140 work role 721 responsibilities for assigned classified and unclassified systems and enclaves.
Implement, assess, monitor, and document security controls and assessment procedures, and support system authorization and continuous monitoring.
Maintain eMASS records, ATO documentation, vulnerability findings, STIG results, remediation actions, system inventories, and supporting evidence.
Coordinate with system owners, administrators, technicians, Government leads, and cybersecurity personnel to resolve compliance and access issues.
Provide cybersecurity guidance and user support, coordinate training, prepare for audits, support inspections, and track vulnerability remediation.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policy, and RMF requirements.
Maintain valid Authorizations to Operate, current eMASS packages, security controls, assessment procedures, plans of action and milestones, and required RMF artifacts.
Prepare and maintain system security plans, assessment reports, risk reports, topology diagrams, hardware and software inventories, standard operating procedures, and related evidence packages.
Use ACAS or other approved scanning tools to identify and assess vulnerabilities, and maintain STIG checklists and documented remediation plans.
Support audits, inspections, configuration-management reviews, vulnerability assessments, cloud-security activities, and cybersecurity reporting.
Coordinate account onboarding and offboarding, DD Form 2875 workflows, workforce qualification tracking, user training, media destruction, agreements, and classified-media handling as assigned.
Provide cybersecurity consulting and customer support; participate in the AFRL Cybersecurity Working Group; prepare meeting minutes and action tracking; and brief Government and industry stakeholders.
Support cybersecurity pilot projects, Inspector General activities, documentation development, system discovery, and implementation of compliant technical solutions.
Protect classified, controlled, proprietary, and sensitive information and comply with OPSEC, security, public-release, network-access, and facility requirements.