Information Systems Security Officer

American Operations Corporation•Hanscom AFB, MA

3d•Onsite

About The Position

American Operations Corporation (AOC) is seeking an Information Systems Security Officer (ISSO) to support the BLITS 3.0 program at Hanscom Air Force Base, Massachusetts. The position will support the operation, security, and compliance of the Hanscom JWICS environment, ensuring the availability, integrity, and protection of classified network infrastructure. The ISSO will perform system administration, user account management, security control implementation, configuration management, RMF and ICD 503 compliance activities, ATO sustainment, incident response, COMSEC support, and coordination with the Site ISSM. The position supports mission-critical SCI systems and requires extensive DoD cybersecurity experience.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or equivalent; an additional four years of relevant experience may substitute for the degree.
At least 10 years of experience with cybersecurity practices within the DoD or another Federal agency.
Strong knowledge of Air Force, DoD, and applicable Federal cybersecurity directives and instructions.
Ability to work dynamically and effectively with personnel on formal and informal projects and conduct technical interchanges as required.
Security+ certification required.
Active Top Secret clearance required; position supports TS/SCI classified environments.
Experience supporting classified/SCI network environments, JWICS operations, RMF, ICD 503, ATO sustainment, and related security documentation is required or strongly expected based on the position duties.

Responsibilities

Support the continued upgrade, expansion, and integration of the Hanscom JWICS SCI architecture and infrastructure.
Plan, implement, upgrade, and monitor security measures protecting computer networks and information.
Ensure appropriate security controls are implemented to safeguard digital files and critical electronic infrastructure.
Respond to computer security breaches, viruses, and other security incidents.
Provide timely coordination and support to the Hanscom JWICS Site Information Systems Security Manager (ISSM) on ICD 503 and Risk Management Framework (RMF) matters to maintain the JWICS Authorization to Operate (ATO) and high security posture.
Serve as controlled equipment custodian for COMSEC and support configuration management, site operations, planning, disaster recovery, and network encryption.
Serve as a technical advisor on system security documentation required for Intelligence Community SCI network segments.
Operate and maintain the customer JWICS LAN in accordance with ICD 503 and applicable subordinate directives and guidance for information systems security in SCI facilities and environments.
Create and maintain JWICS user accounts.
Develop Computer Systems Requirement Documents (CSRDs) and Security Impact Analyses (SIAs) as required.
Serve as alternate for the Hanscom JWICS ISSO.
Coordinate new Hanscom JWICS connections and configuration-management change requests.
Maintain mail distribution lists and customer security groups for JWICS.
Maintain and control access privileges to network resources.
Maintain site-level TCP/IP and Internet services for JWICS and customer organizations.
Maintain JWICS file servers.
Install, monitor, maintain, and ensure optimal operation of communications devices, system hardware, servers, laptops, PCs, and peripherals such as printers, plotters, and scanners.
Test and configure new hardware.
Obtain CSRD approval for systems prior to installation and implement approved CSRDs as directed by the Government COTR.
Augment and support IAO and computer security duties within the SCIF, including preparation of A&A documentation, new-user forms, and related security documentation.