Job SummaryServes as the Information System Security Officer (ISSO) in support of KAFB's owned and operated control systems, ensuring the confidentiality, integrity, and availability of systems, applications, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of cybersecurity programs, policies, procedures, and tools.
Duties and Responsibilities- Provide RMF support required to obtain and maintain Authority to Operate (ATO) approvals for multiple networks.
- Create and maintain documentation and artifacts in Enterprise Mission Assurance Support Services (eMASS) in support of Risk Management Framework (RMF) activities.
- Perform software assurance and risk assessments for the development of several software packages.
- Conduct and review vulnerability and compliance scans of information systems hardware and software and provide guidance for remediation of detected security flaws and configuration issues.
- Review and monitor audit records of information systems.
- Develop and maintain required Standard Operating Procedures (SOP) and Work Instructions in accordance with Department of Defense and United States Air Force Policies and Procedures.
- Oversee all communications with Program Management, Information System Security Manager (ISSM), and On-Site Representative (OSR).
- Support configuration management processes and documentation to ensure all proposed changes are analyzed, tested and approved prior to implementation.
- Develop and test contingency plans and disaster recovery plans.
- Create and manage system Plans of Action and Milestones (POA&M) for all identified weaknesses and vulnerabilities.
- Maintain records of training and certifications for all privileged users within the networks.
Requirements- At least three years' experience working in cybersecurity or a related field such as information technology or control systems management.
- Prefer candidate to have worked in a military environment and particularly, to have familiarity with US Air Force cybersecurity guidance, rules, and regulations.
- Associate degree or military-equivalent training in cybersecurity, information technology, or a closely related field.
- Have or be able to obtain with six months, DoD 8570 (or 8140) IAT Level II certification.
- Be a US citizen.
- Currently possess or be eligible for and maintain a SECRET security clearance.
- Possess a working knowledge of computer security architectures and implementation of security controls.
- Capable of working independently with minimal supervision.
- Possess excellent verbal and written communication skills.
- Must maintain a valid US driver's license.
- Have ability to perform repetitive physical tasks involving lifting at least 50 lbs.
- Be committed to providing for and maintaining a safe working environment.
Desired Qualifications- Bachelor's degree in a related field.
- Working knowledge of RMF package creation and maintenance.
- Experience with eMASS for managing RMF Assessment and Authorization (A&A) activities.
- Knowledge of Energy Management Control Systems (EMCS), Fire Alarm Reporting Systems (FARS), Utility Monitoring Control Systems (UMCS) utilizing BACnet protocols.
- Familiarity with DoD RMF and eMASS Essentials.
- Knowledge of Host Based Security System (HBSS).
- Knowledge of Niagara Workbench software.
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
