Security Guard

Chenega Corporation•San Antonio, TX

2d•Onsite

About The Position

AJANTA CONSULTING, LLC is hiring an Information Systems Security Officer (ISSO) in San Antonio, Texas. This position is contingent upon bid. The ISSO provides enterprise cybersecurity and Risk Management Framework (RMF) support to the Tri-Service Research Laboratory, Bioeffects Division, in support of the Air Force Research Laboratory enterprise. The role supports NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems, helping maintain compliant, current, and supportable cybersecurity authorization packages. The position performs day-to-day ISSO and cybersecurity support, advises technicians and customers, coordinates compliance with enterprise cybersecurity policies, and supports the RMF lifecycle. It maintains authorization documentation and evidence in eMASS and related systems; supports audits, inspections, vulnerability management, access procedures, training verification, meetings, and other cybersecurity program activities. The role may also provide after-hours support when mission requirements require it and courier classified equipment or media to approved destinations. The job requires an associate of science degree in Information Technology or Cybersecurity, at least one year of RMF and cybersecurity services experience, a current CompTIA Security+ certification, and an active Secret clearance.

Requirements

Associate of Science degree in Information Technology or Cybersecurity.
At least one year of experience performing RMF requirements and providing cybersecurity services.
Current, valid CompTIA Security+ certification.
Active Secret clearance.
Experience providing intermediate-level cybersecurity work.
Ability to execute day-to-day ISSO responsibilities across networked and standalone systems and maintain complete, inspection-ready security documentation.
Ability to coordinate control implementation, assessment procedures, vulnerability remediation, and RMF package maintenance with system stakeholders.
Knowledge of DoD and Air Force cybersecurity policy, RMF, ATO processes, DoDI 8510.01, NIST SP 800-53 Revision 5, CNSSI 1253 Revision 4, and related risk management directives.
Knowledge of eMASS, ITIPS, AFRL RMF Workflow, ACAS or other Air Force-approved scanning tools, STIGs, vulnerability management, and cybersecurity audit evidence.
Ability to assess threats and vulnerabilities, develop security risk profiles, document findings, and coordinate practical remediation plans.
Ability to prepare and maintain accurate cybersecurity plans, technical reports, meeting minutes, briefings, standard operating procedures, and RMF artifacts.
Ability to interpret technical and policy requirements and explain them clearly to users, technicians, managers, Authorizing Officials, auditors, and senior leaders.
Ability to manage multiple systems, packages, deadlines, and compliance activities without overwriting or compromising other team members' data.
Ability to collaborate with technical leads, Government stakeholders, external customers, inspectors, and working groups in a distributed organization.
Customer-service skills sufficient to field cybersecurity questions and provide sound process, policy, configuration, and implementation guidance.
Ability to safeguard confidential, proprietary, sensitive, and classified information and comply with OPSEC and public-release requirements.
Ability to apply cybersecurity principles to cloud, virtualization, collaborative systems, multi-platform research computing, mobile technologies, and automated IT management environments.
Ability to work a flexible schedule when mission requirements require after-hours support.

Responsibilities

Perform Information Systems Security Officer duties aligned to DoD 8140 Cyberwarfare Work Role Code 721.
Provide day-to-day cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.
Advise unit technicians and customers on cybersecurity processes, policies, configurations, and implementation.
Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy across the distributed AFRL organization.
Support the RMF lifecycle and maintain current ATO packages, security documentation, and evidence in eMASS.
Maintain and update system security plans, security assessment reports, plans of action and milestones, risk assessments, topology diagrams, software and hardware lists, standard operating procedures, and related artifacts.
Upload changes to required ATO documentation in eMASS within three business days and maintain package artifacts for semiannual inspection.
Support configuration management reviews, audits, inspections, vulnerability remediation, and maintenance of system hardening checklists and STIGs.
Use ACAS or other Air Force-approved scanning tools to support audit controls and interpret vulnerability scan results.
Conduct technical and non-technical risk and vulnerability assessments for systems, enclaves, applications, and software; document findings and support mitigation activities.
Support Information Assurance Vulnerability Management dissemination, reporting, and compliance procedures.
Maintain cybersecurity data and portfolio structures in ITIPS, AFRL RMF Workflow, and eMASS.
Track DoD 8140.03 workforce qualification requirements, participate in related meetings, and support compliance metrics, reporting, and briefings.
Support logical access onboarding and offboarding, including DD Form 2875 procedures and organizational account coordination.
Verify required cybersecurity training completion and support continued network access requirements for TSRL users.
Support quarterly media destruction in accordance with Air Force and local policy.
Attend cybersecurity meetings in person or virtually, prepare minutes, and support the AFRL Cybersecurity Working Group through roll call, note taking, action tracking, project facilitation, and documentation development.
Support system discovery, system categorization, compliant cybersecurity solution development, hardware and software entry/exit requirements, and organizational security policy development.
Support administration and periodic review of MOAs, MOUs, and Acknowledgement of Responsibility letters for the RMF accreditation program.
Courier classified equipment or media to approved TSRL destinations in accordance with applicable security regulations.
Support AFRL Inspector General pre-inspection and post-inspection activities for the communications functional area.
Support research, selection, implementation, operation, metrics collection, and reporting for IT pilot or exploratory projects with potential enterprise applicability.
Provide timely, professional customer service and perform other duties as assigned within the scope of the position.