Information Systems Security Officer

Job description

**Position is contingent based upon contract award.**

**Purpose and Scope:**

Supports Information Assurance (IA) operations for specific project(s) or contract(s), either individually or as part of an IA Team.

Tasks and focused responsibilities include Information System security requirements and risk assessments, vulnerability scan, security test and evaluations, monitoring event logs, and maintaining network health and security.

**Essential Responsibilities:**

+ Must have a thorough working knowledge of the National Industrial Security Program Operating Manual (NISPOM), NISPOM Overprint and/or DOD JSIG Manual.
+ Assists Information System Security Manager (ISSM) to maintain approvals/accreditations for all classified systems and ensures transmission to appropriate government agencies on a timely basis.
+ Assist ISSM in developing information System Security Plans (SSP), Concept of Operations (CONOPS)and best practices and guidelines for classified systems.
+ Assist ISSM in performing administrative duties to authoring SSP and all other approval / accreditation paperwork for approvals.
+ Assist ISSM in developing, implementing, explaining, briefing, and training the system custodians/users concerning their duties/responsibilities on accredited systems.
+ Assist ISSM in investigating security incidents and recommending corrective actions.
+ Implement and enforce all AF cybersecurity policies, procedures, and countermeasures.
+ Ensure all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to the IT according to AFMAN 17-1301.
+ Maintain all authorized user access control documentation IAW the applicable AF Records Information Management System.
+ Ensure software, hardware, and firmware complies with appropriate security configuration guidelines(e.g., security technical implementation guides /security requirement guides).
+ Ensure proper configuration management procedures are followed prior to implementation and contingent upon necessary approval.

Coordinate changes or modifications with the system-level ISSM,SCA, and/or the Wing Cybersecurity office and to the CO and GPM
+ Initiate protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered.
+ Report security incidents or vulnerabilities to the system-level ISSM, wing cybersecurity office according to AFI 17-203, Cyber Incident Handling and to the CO and GPM
+ Initiate exceptions, deviations, or waivers to cybersecurity requirements.
+ Responsible for updating and maintaining the system security plans for each accredited classified computer systems at assigned site.
+ Must possess a strong working knowledge of computer systems and system software.
+ Conducts weekly audits of all approved systems.
+ Ensures compliance with government and company security policies.
+ Uploads and updates documents for projects in Xacta in the Risk Management Framework to attain Interim Authorization to Test (IATT), Authority to Connect (ATC), and Authority to Operate (ATO), as needed
+ Perform general housekeeping duties in support of a safe working environment.
+ Perform all other position related duties, as assigned, or requested.

**Minimum Position Knowledge, Skills, and Abilities Required:**

+ Bachelor’s degree in a related field or a combination of academic/technical/military training and at least 3 years of job-related experience or equivalent
+ Must have an active DoD Top Secret US Government Clearance.

Note: US Citizenship is required for a US Government clearance.
+ Must be able to obtain and maintain TS/SCI SAP/SAR Security Clearance, as required.
+ Must possess an appropriate DoD 8140 certification (CASP+, CCSP, Cloud+, CSSLP, GSEC, CISSP, Etc.) matched to assigned duties.
+ Possess a valid state issued driver’s license.
+ Must have advanced understanding of computers and their peripherals and designated operating systems.
+ Must be self-directed and able to establish and meet project guidelines/timelines.
+ Must possess excellent oral, written, and graphical communication skills.
+ DODM 5205.07 Risk Management Framework, Operational Requirements and Contract Specific IA requirements experience required.

**Compensation & Benefits**

HIRING SALARY RANGE: $110,000 - $130,000 (Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant internal equity, and alignment with market data.)

Amentum is proud to be an Equal Opportunity Employer.

Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low-income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law.

Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters (https://postings.govdocs.com/#/vxSkbztPuAwwxfs) .

Required Skill Profession

Other General