Information System Security Officer (ISSO) - Junior - AFRL

Junior Information System Security Officer (ISSO)

LOCATION: Eglin AFB, FL

JOB STATUS: Full-time CLEARANCE: Secret

CERTIFICATIONS: DoD 8570/8140 IAT Level II; CompTIA Security+ CE or equivalent

TRAVEL: n/a

Astrion has an exciting opportunity for a Junior Information System Security Officer (ISSO) for the Tenants Contract, supporting the Air Force Division at the Air Force Research Laboratory Munitions Directorate's Integration and Operations Division (AFRL/RWOC) at EGLIN AFB, FL.

REQUIRED QUALIFICATIONS / SKILLS

• Education: Bachelor's or Master's Degree. Relevant experience may be substituted for the degree.
• Experience: 3 Year's Experience.
• Security Clearance: Secret Clearance. Top Secret Eligible. US Citizenship is required.
• Certifications:
• DoD 8570/8140 IAT Level II
• CompTIA Security+ CE or equivalent
• Minimum one year's experience with Enterprise Mission Assurance Support Service (eMASS)
• Experience in information security roles, preferably in a military or defense environments. This may include experience in areas such as cybersecurity, information assurance, network security, or system administration.
• Thorough understanding of Department of Defense (DoD) security regulations, policies, and guidelines, including DoD Instruction 8500 series, DoD 8570/8140 requirements, and Risk Management Framework (RMF) processes.
• Proficiency in risk management methodologies and techniques, including risk assessment, risk analysis, and risk mitigation strategies, to effectively safeguard information systems and data assets.
• Strong technical skills in areas relevant to information security, such as network security, operating systems, cryptography, intrusion detection/prevention systems, firewalls, and security assessment tools.
• Excellent verbal and written communication skills are essential for effectively communicating security requirements, policies, and procedures to diverse audiences, including technical and non-technical personnel.
• Meticulous attention to detail is critical for reviewing, analyzing, and documenting security controls, vulnerabilities, and incidents accurately and comprehensively.
• Strong problem-solving and analytical skills to identify security issues, assess their impact, and develop effective solutions and countermeasures to address them.

RESPONSIBILITIES

• Implement and maintain security controls for information systems, ensuring alignment with NIST 800-53, NIST 800-171, and other applicable security frameworks
• Develop and maintain security documentation, including System Security Plans (SSPs), risk assessments, incident response plans, and security policies and procedures
• Utilize eMASS for documenting and managing security controls, developing ATOs for AFRL owned systems, conducting self-assessments, and preparing for audits and assessments
• Develop and maintain system security plans (SSPs), policies, and procedures within the eMASS framework, track and manage POA&Ms within eMASS to remediate vulnerabilities and security gaps and support the Authorizations to Operate (ATO) process by providing security documentation, answering security controls, participating in security reviews, and addressing security findings.
• Conduct security assessments and audits to identify vulnerabilities and recommend corrective actions
• Advise and assist within Special Access Program (SAP) and/or classified environments and support other unclassified enclaves supporting DoD agencies, such as HQ Air Force, Office of the Secretary of Defense and Military Compartments efforts