Job Description

Location: Andrews AFB, MD

Security Clearance: Active TS/SCI [Required]

Job Type: Full-Time

Target Salary Range*: $120,500 - $131,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Information System Security Officer (ISSO) II maintains the operational security posture of information systems in close collaboration with the ISSM and ISO. Responsibilities include day-to-day system security operations, physical and environmental protection, personnel security, incident handling, and security training and awareness.

The role works within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense (OSD), and Military Compartments efforts. Based at Andrews AFB, MD, the position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities.

Key Responsibilities

Security Operations and Coordination

• Assist the ISSM in fulfilling security duties and responsibilities.
• Perform ISSO duties for in-house and external customers.
• Coordinate with the ISSM and ISO to monitor information systems and their operating environments.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
• Attend required technical and security training relevant to assigned duties, including operating systems, networking, and security management.

Authorization and Security Documentation

• Prepare, review, and update authorization packages.
• Conduct periodic information system reviews to ensure compliance with security authorization packages.
• Keep information system security documentation current and accessible to properly authorized individuals.
• Prepare reports on the status of security safeguards applied to computer systems.

Configuration and Change Management

• Implement configuration management across authorization boundaries.
• Conduct security impact analyses for all configuration management changes to authorization boundaries and provide findings and recommendations to the ISSM.
• Notify the ISSM of changes that may affect information system authorization determinations.
• Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.

Security Assessments and Audit Review

• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Execute the cybersecurity portion of self-inspections, including security coordination and review of all system assessment plans.
• Identify cybersecurity vulnerabilities and assist in implementing countermeasures.

Qualifications

Education

• Bachelor’s degree or 4 additional years of experience in lieu of a degree. [Required]

Experience

• 2–5 years of related experience, especially in developing RMF packages or bodies of evidence. [Required]
• Prior performance in roles such as System/Network Administrator or ISSO. [Required]
• SAP experience. [Required]

Certifications

• IAT Level II or IAM Level II certification. [Required]

Clearance

• TS/SCI clearance. [Required]
• Willingness to obtain a CI Poly. [Required]

Working Conditions

• Location: Andrews AFB, MD.