Senior Cyber Analyst / ISSO

Quick Services•Tucson, AZ

22h•$94,648•Onsite

About The Position

The ISSO will provide Cybersecurity support services to assist ACC Cybersecurity Chief Information Security Officer and unit Information System Security Officers (ISSO) in maintaining an effective cybersecurity program that supports missions and adequately protects the confidentiality, integrity and availability of AF IC information resources. The role involves overseeing JWICS operations for all Wing and subordinate unit SCIFs on site, including all Site-wide JWICS Command, Control, Communications, Computers, and Intelligence (C4I) and performing JWICS specific touch maintenance for computers, servers, and related software and hardware. This encompasses account management, network storage, local authentication servers, file servers, user privileges, local group policy, local software testing, restoration operations, contingency planning, and local backups. The position requires ensuring security patching, pushing updates that the AF JWICS Enterprise cannot perform remotely, and daily liaison with ESD and ESC AF to resolve user and network issues. The ISSO will also conduct investigative administration for cybersecurity incidents and assist government agencies with various administrative tasks related to SCI security support functions and JWICS systems within SCIFs. The candidate is expected to work autonomously with minimal oversight while also collaborating with multiple personnel, demonstrating strong analytical and problem-solving skills in security matters.

Requirements

Possess a current TS/SCI security clearance
IAT Level 2 certification
Current Security + certification
Experience working Assessment and Authorization documents, assessments and Cybersecurity program tasks
Experience in a full range of IT security principles, including: concepts, practices, products and services (including system software, database software and immediate access storage technology)
Experience in disseminating IT security tools and procedures
Experience in IT security certification and accreditation requirements
Familiar with and use Active Directory tools to manage accounts
Familiar with imaging computers and upgrading operating systems
Familiar with using scanning tools to scan and subsequently patch devices
Familiar with trouble ticketing tools such as Remedy
Able to remotely log in to computers as needed for maintenance
Able to add and remove computers to domains
Able to assign and remove security controls to user accounts
Able to perform all Security Plus (Security+) type functions
Able to work independently and/or with a team
Familiar with and be able to modify file servers and shared permissions
Demonstrates in-depth knowledge and understanding of the labor category activities required to meet mission requirements
Demonstrates mastery of qualitative and quantitative analytic methodologies and pursue developments in academia or other fields that affect tradecraft methodology
Demonstrates ability to define comprehensive, new, or unique research approaches that enable rigorous assessments to address and contribute to high-level tasks
Demonstrates in-depth analysis of analytic operations and knowledge management issues across organizational and intra-IC boundaries and clearly articulates key findings
Demonstrates ability to work independently and with minimal oversight
Demonstrates ability to review analytic products for cogent arguments, tradecraft standards, and adequate support for conclusions; routinely tests analytic rigor of analytic products
Minimum 10 years of experience related to the specific labor category with at least a portion of the experience within the last 2 years
Master's degree from a college or university accredited by an agency recognized by the U.S. Department of Education; or have bachelor's degree from a college or university accredited by an agency recognized by the U.S. Department of Education and an additional 5 years of related senior experience, for a total of 15 years, as a substitute to the master's degree
Ability to gather facts and use effective analytical and evaluative methods to assess information, plan the sequence of actions necessary, make sound decisions and solve a variety of security problems
Thorough understanding of their respective position, functions, and duties

Responsibilities

Develop local unit Cybersecurity programs and security plan IAW ACC, AF, IC, and DOD guidance
Gather data, analyze compliance and report results on the condition and progress of local unit Cybersecurity programs, security plans, plan of action and milestones (POA&M) and Assessment and Authorization (A&A) workflow tools data, patch management, information assurance vulnerability alerts (IAVA), DoD 8570.01M certifications, and Federal Information System Modernization Act (FISMA) compliance requirements, and Authorizations to Operate (ATOs) to unit leadership and HHQs as directed
Interact with local units and HHQ IISMs to provide Cybersecurity assessments, courses of action, and solutions to commanders on how to improve their Cybersecurity programs
Develop and provide on-the-job work center training to Government civilian, contractor, and military personnel on various IT security tools, policies and procedures required to protect resources and meet standards
Oversee JWICS operations for all Wing and subordinate unit SCIFs on site
Be responsible for all Site-wide JWICS Command, Control, Communications, Computers, and Intelligence (C4I)
Perform JWICS specific touch maintenance to install and maintain computers, servers, and all JWICS related software and hardware (including account management, network storage, local authentication servers, file servers, user privileges, local group policy, local software testing, restoration operations, contingency planning, and local backups)
Ensure security patching is completed and locally downloaded, and also push JAVA, NOTAMS, and TCNO patches the AF JWICS Enterprise is unable to perform remotely
Work directly with users at the site and liaise daily with the ESD and ESC AF to help resolve user and network related issues as well as maintain the integrity of the Site domain
Perform investigative administration operations in support of the Cyber Security Operations Center for malware, spyware, Trojans, or unauthorized software that gets detected on any device at the Site
Assist USAF and other government agencies in the creation and development of SSO documents, PowerPoint presentations, formal messages, background papers, and items of interest, staff summary packages, and other administrative tasks as necessary
Perform SCI security support functions and have access to JWICS systems located within the SCIF