Position SummaryOdyssey has an exciting opportunity for an Information Systems Security Officer (ISSO) SE-3 supporting the 46 Test Squadron 6 Sensors and Defensive Systems Flight (46 TS/TGBB) at Eglin AFB, FL. Working closely with the Information Systems Security Manager (ISSM), the ISSO will support Assessment & Authorization (A&A) activities for classified systems used by test engineers and data analysts. The ISSO will develop, maintain, and implement security documentation; define cybersecurity requirements for new and existing systems; and assist in the enforcement of security policies and standards for highly sensitive DoD/SAP environments.
This is a full9time, onsite position at Eglin AFB, FL, with <10% CONUS/OCONUS TDY travel.
Responsibilities
Duties include, but not limited to:
- Lead and implement all phases of the Risk Management Framework (RMF) Assessment & Authorization (A&A) lifecycle for classified information systems
- Implement, assess, and monitor security controls to safeguard classified networks and information
- Perform vulnerability management activities including vulnerability assessments, Security Technical Implementation Guide (STIG) evaluations, and ACAS scans
- Perform Security Impact Assessments (SIA) and vulnerability analysis as part of Configuration Management (CM)
- Support and participate in incident response activities, including investigation, reporting, and mitigation actions
- Provide configuration management for all security9relevant hardware, software, and firmware; validate that system changes comply with security policies
- Prepare, review, and maintain all security documentation including SSPs, Risk Assessment Reports, POA&Ms, hardware/software baselines, and complete Authorization to Operate (ATO) packages
- Ensure documentation is current, accurate, and accessible to authorized personnel
- Develop and provide security awareness training for personnel with access to classified systems
- Serve as a primary cybersecurity liaison with government customers, suppliers, and internal stakeholders
- Support audits, inspections, investigations, and compliance9driven cybersecurity requirements
- Oversee system and network designs involving diverse computing environments with multiple classification levels
- Perform other cybersecurity duties as assigned by the ISSM
- Interface with government approving authorities across the DoD in an information9security role
Qualifications
Citizenship: U.S. Citizenship Required
Minimum Required Qualifications:Clearance: Active Secret required; must be able to obtain and maintain TS/SCI and SAP access
Education: Bachelor9s degree in a technical field and at least 3 years relevant technical experience (experience may substitute for education).
Years of Experience:310 years relevant technical/cybersecurity experience
Certifications: CompTIA Security plus (Security+) or CompTIA SecurityX (SecurityX - formerly known as CASP+) or CompTIA Cloud+ (Cloud+) or Certified Cloud Security Professional (CCSP) Systems Security Certified Practitioner (SSCP) or GIAC Security Essentials Certification (GSEC), Certified Information Systems Security Officer (CISSO) or Certified in Governance, Risk and Compliance (CGRC/CAP) or GIAC Cyber Security Analyst (GCSA) or Certified Information Systems Security Officer (CISSO) or Certified Chief Information Security Officer (CCISO)
- Experience with RMF, NIST 800 53, JSIG, and A&A documentation
- Experience performing system vulnerability assessments, SIAs, and configuration management
- Experience generating formal cybersecurity documentation and reports
Preferred Qualifications
Clearance: TS/SCI
Certifications: Certified Information Security Manager (CISM) or Federal IT Security Professional 3anager (FITSP-M) or GIAC Certified Intrusion Analyst (GCIA) or GIAC Certified Incident Handler (GCIH) or GIAC Security Leadership Certification (GSLC) or GIAC Global Industrial Cyber Security Professional (GICSP)
Certified Information Systems Security Professional 3 Information Systems Security Management Professional (CISSP 1SSMP) or Certified Information Systems Security Professional (CISSP)
- Experience with SCC/Evaluate STIG and ACAS
- Experience with Windows/Linux, virtual systems, network devices, databases, and web apps
- Experience with AF software/application certification processes
- Experience conducting cybersecurity audits using reduction tools
Technical Skills
- Strong understanding of SAP cybersecurity and secure system operations in on9prem and cloud-based environments
- Understanding of RMF lifecycle for DoW systems in SAP environments
- Experience with NIST 800 53 controls and JSIG requirements
- Experience designing, developing, or managing IT/cyber systems and integrating emerging technologies
- Experience leading IT activities ensuring compliance with legal, regulatory, and DoD/AF requirements
- Strong project management and documentation skills
- Experience with STIG evaluations, ACAS scans, SIA assessments, and vulnerability analysis
- Experience with auditing, incident response, and investigative cybersecurity activities
- Experience assessing Windows, Linux, virtual systems, network devices, and web applications
- Experience with ATO documentation including SSPs, RARs, POA&Ms, and hardware/software baselines
- Preferred: Experience with SCC/Evaluate STIG, ManageEngine EventLog Analyzer, and Air Force software certification assessments
Interpersonal Skills
- Strong oral and written communication skills
- Ability to negotiate complex issues and maintain effective working relationships
- Ability to lead studies, projects, and system9level cybersecurity initiatives
- Ability to collaborate with diverse engineering, operations, and program stakeholders
- Ability to work independently with high initiative and minimal supervision
Additional Information
Location: Eglin AFB, FL
Work Environment: Onsite
Job Status: Full9ime
Travel: 10% CONUS/OCONUS TDYs
#LI-EW1
#TMAS3 #CTG
