Information Systems Security Manager (ISSM) - Subject Matter Expert (SME) to provide full-spectrum cybersecurity support across CAOC-X applications, tests, exercises, and experimentation events. The ISSM will serve as the principal advisor and technical lead for ensuring secure implementation, risk mitigation, and compliance for all classified and unclassified CAOC-X systems. This role requires a deep understanding of the Risk Management Framework (RMF), DoD cybersecurity requirements, and Air Force security directives.
RequirementsKey Responsibilities:- Provide cybersecurity support for CAOC-X systems, applications, and exercises across both classified and unclassified environments.
- Develop, maintain, and manage RMF packages and associated documentation for CAOC-X networks.
- Review and recommend appropriate security levels for information systems prior to testing or deployment.
- Manage system certifications and accreditations, including packages for Air Operations Center (AOC) systems.
- Ensure RMF documentation complies with Federal, DoD, and Air Force security directives.
- Advise on interoperability and cybersecurity integration with other service branches during CAOC-X events.
- Act as the focal point for cybersecurity, including computer, communications, and emissions security.
- Lead risk identification, assessment, and mitigation efforts for CAOC-X environments.
- Maintain real-time situational awareness of cybersecurity posture and initiate incident response and remediation actions as needed.
- Conduct annual security reviews and test selected cybersecurity controls.
- Ensure compliance with remnant data and secure disposal requirements per AFMAN 17-301 (COMPUSEC).
Certification Requirements:- Windows OS, UNIX OS, ACAS/ESS, and HBSS training required.
- Must meet DoD 8140.03 DoD Cyber Workforce Framework (DCWF) requirements for the following roles at the Advanced Proficiency Level:
- Information Systems Security Manager (722)
- Cyber Defense Incident Responder (531)
Required Experience:- Minimum of 10 years of experience in cybersecurity or related fields.
- Demonstrated experience creating and managing Risk Management Framework (RMF) documentation and artifacts.
- Experience with implementation of Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Management (IAVM).
- Experience supporting the full cybersecurity certification lifecycle for:
- Authority to Operate (ATO)
- Authority to Connect (ATC)
- Interim Authority To Test (IATT)
- Software certifications across NIPRNET and SIPRNET
- Experience with Commercial Solutions for Classified (CSfC) cross domain solutions and certification processes.
- Hands-on experience with ACAS, NeuVector, and Endpoint Security Solutions (ESS).
Security Clearance:- Active Secret clearance required with the ability to obtain Top Secret/SCI.
Benefits- Covers 100% of employee benefit premiums, including Medical (PPO or HDHP Option), Vision, Dental
- Matching 401K
- Short- and Long-Term Disability
- Pet Insurance
- Professional Development/Education Reimbursement
- Parking and Transit Benefits for NY, NJ, ATL, and DC Metro areas
Other Duties:Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
