Position overview:DLS Engineering is seeking a Information Assurance III (ISSO) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.
As part of AFINC, the mission of the 26th Network Operations Squadron (26 NOS) is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). In the execution of its mission, the 26 NOS maintains network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks.
A day in the life:- Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards.
- Implement the Assessment and Authorization (A&A) processes under the Risk Managed Framework (RMF) for new and existing information systems.
- Maintain a current authorization to operate (ATO), and approval to connect (ATC) (if required), and in implementing corrective actions identified in the plan of action and milestones.
- Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA) and Risk Acceptance Letters.
- Develop an Information System Continuous Monitoring (ISCM) strategy and monitor any proposed or actual changes to the system and its environment to maintain compliance.
- Audit systems to ensure security posture integrity.
- Conduct assessments and test/analysis data to document state of compliance with security requirements.
- Conduct risk assessments and investigations, recommend implementation of risk mitigations, and coordinate incident response activities.
- Supervise the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures.
- Register, maintain, verify, submit exceptions, conduct annual review, or decommission systems ports, protocols, and services (PPS) as necessary to ensure compliance with the DoD PPS Category Assurance List (CAL) and DoD PPS Vulnerability Assessment reports.
When I read the below it sounds like me:- 5+ years experience in a cyber security or information assurance role including at least 3 years supporting the RMF.
- Must be CISM or CISSP certified (or hold an equivalent certification in compliance with DoD 8140/8570 IAM II).
- Must hold the Certified in Governance, Risk and Compliance (CGRC) certification and have participated in training for DISA ACAS Supervisor and Operator and DISA Enterprise Mission Assurance Support Service (eMASS).
- Must be a US citizen
- Must hold a current Top Secret clearance with SCI Access (TS/SCI) or an active Secret clearance.
Other information:- We offer a competitive salary and a 401k program with company match.
- We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
- We offer a generous paid time off package
The pay range for this role is:
109,000 - 112,000 USD per year (Montgomery, AL)
