This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Astrion has an exciting opportunity for an INFORMATION SYSTEM SECURITY OFFICER (ISSO) supporting the 96th Test Wing located at EGLIN AFB, FL.
Job Responsibility
Serve as an Information Systems Security Officer (ISSO) overseeing the cybersecurity posture and compliance of critical mission systems.
Execute the Risk Management Framework (RMF) lifecycle, adhering to the DoD Joint SAP Implementation Guide (JSIG), and securing Authorities to Operate (ATOs) for Information Systems (IS).
Develop, update, and maintain System Security Plans (SSPs), managing Plans of Action and Milestones (POA&Ms), and conducting continuous monitoring of classified and unclassified networks.
Ensure systems comply with information security policies, Federal Information Security Management Act (FISMA), National Institute of Standards and Technology (NIST) controls, and applicable DoW/DoD regulations.
Integrate security by design, advising software developers, system administrators, and project leaders on secure architecture, hardware/software compatibility, and vulnerability mitigation.
Design and review security audit routines, analyze complex security incidents, and perform risk assessments on new technologies and system modifications.
Work to achieve quality improvement in security processes and take a proactive approach to customer assistance.
Maintain an up-to-date awareness of emerging cyber threats and technologies to predict future security requirements.
Knowledge of Information Assurance (IA) and Cybersecurity principles, concepts, and methods sufficient to evaluate new and emerging IT security technologies and ensure their successful integration into the existing and anticipated infrastructure.
Knowledge of the Risk Management Framework (RMF), DoD JSIG, NIST SP 800-53 security controls, and FISMA requirements to guide systems through the assessment and authorization (A&A) process and maintain continuous ATO status.
Knowledge of IT systems architecture, operating systems, and network infrastructure to isolate vulnerabilities, interpret vulnerability scanner results (e.g., ACAS/Nessus, STIGs), and recommend technical mitigations that support organizational business processes without compromising security.
Knowledge of system development life cycles (SDLC) and DevSecOps to ensure security controls are integrated early in the design phase and to evaluate the security impact of proposed modifications or new applications.
Ability to gather facts and use analytical methods to assess complex cybersecurity requirements, develop and manage System Security Plans (SSPs) and POA&Ms, and solve intricate security and compliance problems.
Ability to maintain an up-to-date awareness of technological advances and cyber threat intelligence to predict how management can securely meet future operational requirements.
Ability to communicate orally and in writing to brief senior leadership on cyber risks, draft comprehensive security documentation, and provide training to functional users.
Ability to modify and adapt precedent security solutions to unique, specialized, or Special Access Program (SAP) requirements.
Skill in applying agency cybersecurity policies, incident response procedures, and audit management standards.
Requirements
Active SECRET clearance. Must be eligible for a TOP SECRET clearance. Must be a U.S. citizen.
Requires 3 to 10 years of relevant experience
Bachelor’s or Master’s degree in the applicable discipline.
6 years work experience may be substituted for a Bachelor's Degree
OR Associate’s degree plus 4 years work experience may be substituted for a Bachelor's Degree
OR Bachelor's Degree plus 8 years work experience may be substituted for a Master's Degree
OR 12 years work experience may be substituted for a Master's Degree.
This skill level typically works on high-visibility or mission critical aspects of a given program and performs all functional duties independently.
CompTIA Security+ certification is required. Other certification may be required based on constantly changing requirements.
Nice to have
Technical audits and enforcement of information systems security procedures.
Experience working with government regulations, such as NISPOM, JAFAN, JSIG, DIACAP and Risk Management Framework.
Experience supporting various system configurations (Stand Alone, Local Area Networks, and Wide Area Networks).
Self-motivated and possess good written, verbal, listening and presentation skills.
Previous experience working in a classified information systems environment.
Familiarity with test equipment and sanitization procedures.
What we offer
Competitive salaries
Continuing education assistance
Professional development
Multiple healthcare benefits package options
401K with employer matching
Competitive time off policy along with a federally recognized holiday schedule