Mission Analyst ISSO-Red Flag

Milsup LLC•Las Vegas, NV

12d•Onsite

About The Position

The ISSO (Information Systems Security Officer) will be responsible for ensuring the appropriate operational security posture is maintained for information systems and will assist as a SCIF/SAP security manager in accordance with their respective requirements. ISSOs will require access to COMSEC information at on-base locations and may serve as COMSEC Custodians. They will protect COMSEC material according to directives from the installation COMSEC officer and may manage security aspects of information systems as interim ISSMs/SSOs. Responsibilities include day-to-day security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness. ISSOs will actively monitor systems and their operating environments, developing, updating, managing, and controlling changes, and assessing their security impact. They will support information system security in co-use SCIF/SAPFs and support classified warfare planning, briefings, and debriefings for Red Flag exercises. Taskings may also support joint, cyber, and space planning and logistical support for Red Flag exercises.

Requirements

Bachelor's Degree desired.
ISSOs shall be responsible for ensuring the appropriate operational security posture is maintained for information systems and assist as a SCIF/ SAP security manager IAW their respective requirements.
ISSOs will require access to COMSEC information at on-base locations.
ISSOs will not require their own COMSEC account but may be the COMSEC Custodians.
Access will be coordinated with the sponsoring agency.
Access to COMSEC can be controlled by ISSOs IAW their computer security duties.
ISSOs will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer.
IAW directives from ACC SSO and HQ ACC A5/8ZX, ISSOs may manage the security aspects of information systems as interim 57 WG A5Z ISSMs/ SSO ISSM and shall be responsible for the day-to-day security operations of applicable systems.
Responsibilities also include physical and environmental protection, personnel security, incident handling, security training and awareness.
The ISSOs in coordination with other information systems personnel will have an active role in monitoring a system and its environment of operation to include developing, updating, managing and controlling changes to the system, and assessing the security impact of those changes.
ISSOs will support information system security in both co-use SCIF/SAPFs IAW ACC SSO and HQ ACC A5/8ZX directives and policies as they apply to their respective information systems and spaces.
ISSOs will support classified warfare planning, briefings and debriefings for RF exercises.
Minimum three (3) years' experience in listed field conducting security management support to TS/SCI, STO and SAP/SAR level programs supporting joint and multinational exercises.
Taskings may support joint, cyber, and space planning and logistical support of RF exercises.
Must possess highly developed organizational, planning and management writing skills, oral communication skills, project management skills, ability to schedule workflow, prioritize, delegate, meet deadlines, and be multi-task oriented.
Proficient in Microsoft Word, Excel, PowerPoint and Outlook.
Must possess and maintain a Top Secret clearance with the ability to obtain a TS/SCI, STO, SAP clearance.
Worked in Specialty Codes/Areas: 0080 or one year experience in classified vault management.

Responsibilities

Ensuring the appropriate operational security posture is maintained for information systems.
Assisting as a SCIF/SAP security manager in accordance with their respective requirements.
Protecting COMSEC material according to directives from the installation COMSEC officer.
Managing security aspects of information systems as interim ISSMs/SSOs.
Overseeing day-to-day security operations of applicable systems.
Providing physical and environmental protection.
Managing personnel security.
Handling security incidents.
Conducting security training and awareness.
Monitoring a system and its environment of operation.
Developing, updating, managing, and controlling changes to the system.
Assessing the security impact of system changes.
Supporting information system security in co-use SCIF/SAPFs.
Supporting classified warfare planning, briefings, and debriefings for Red Flag exercises.
Supporting joint, cyber, and space planning and logistical support of Red Flag exercises.
Knowledge of data backup, recovery, system functions, security policies, technical security safeguards, and operational security measures.
Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
Knowledge of controls related to the use, processing, storage, and transmission of data.
Knowledge of TACLANE operation and configuration.
Knowledge of the organization's enterprise information technology (IT) goals and objectives to develop and maintain a formal IS security program and policies for the assigned area of responsibility.
Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) to develop and oversee operational information systems security implementation policy and guidelines.
Knowledge of implementing multiple classified networks and security architecture to include (JWICS and CV2 networks), and their respective topologies, protocols, components, and principles to develop and oversee information systems security in accordance with implementation policy and guidelines.
Knowledge of measures or indicators of system performance and availability.
Knowledge of laws.
Knowledge of network traffic analysis methods.
Knowledge of access control management to include information security of access badge systems.
Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
Knowledge of server and client operating systems.
Skill in creating policies that reflect system security objectives.
Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
Knowledge of current and emerging threats/threat vectors.
Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
Knowledge of penetration testing principles, tools, and techniques.
Knowledge of physical, personnel, industrial, and information security.
Knowledge of information security to include providing direct support and assistance in day-to-day administration of the overall STO, SAP/SCI information security program.
Knowledge of information security management, to ensure compliance of foreign national information systems are in accordance with DoD/DAF policy, or Joint Special Access Program Implementation Guide requirements in direct support of STO, SAP/SCI events.
Knowledge of STO, SAP/SCI Information Systems Security and STO, SAP/SCI and Collateral Cybersecurity measures.
Knowledge of STO, SAP/SCI Personnel Security to manage direct support of day-to-day administration as well as requirements supporting exercises and events.
Knowledge of IJSTO CJCSI policies, CAB Management Plans, and STO requirements to manage STO operations as a STO/CAB ISSO.
Knowledge of COMSEC policies and procedures, COMSEC OI and Emergency Action Plans/task.