Job Description

Location: Hanscom AFB, MA
Security Clearance: Active TS/SCI [Required]
Job Type: Full-Time

Target Salary Range*:$132,000 - $141,000

*This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

The Information System Security Officer (ISSO) is responsible for maintaining the appropriate operational security posture of an information system and works closely with the ISSM and ISO. The position manages the security aspects of information systems and supports day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness.

The ISSO works within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense (OSD), and Military Compartments efforts. The position provides day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) activities.

Key Responsibilities

Security Operations and Authorization

• Assist the ISSM in meeting duties and responsibilities.
• Prepare, review, and update authorization packages.
• Monitor information systems and their environments of operation in coordination with the ISSM and ISO.
• Develop and update authorization documentation.
• Conduct continuous monitoring activities for assigned authorization boundaries.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Notify the ISSM of changes that might affect information system authorization determinations.
• Coordinate hardware, software, and firmware changes or modifications with the ISSM and AO/DAO before implementation.
• Assess the security impact of changes and make recommendations to the ISSM.
• Assist Department of Defense, National Agency, and Contractor organizations with assessment and authorization (A&A) efforts.

Configuration Management and System Recovery

• Implement configuration management across authorization boundaries.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
• Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media.

Security Compliance and Monitoring

• Execute the cybersecurity portion of the self-inspection, including security coordination and review of system assessment plans.
• Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
• Ensure all information system security-related documentation is current and accessible to properly authorized individuals.
• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Prepare reports on the status of security safeguards applied to computer systems.

Training and Customer Support

• Attend required technical and security training, including operating system, networking, and security management training, relative to assigned duties.
• Perform ISSO duties in support of in-house and external customers.

Qualifications

Education

• Bachelor's degree or 4 additional years of experience in lieu of a degree [Required].

Experience

• 5–7 years of related experience, especially in developing Risk Management Framework (RMF) packages or bodies of evidence [Required].
• Prior performance in roles such as System/Network Administrator or ISSO [Required].
• 2+ years of SAP experience [Required].

Certifications

• IAT Level II or IAM Level II certification [Required].

Clearance

• TS/SCI clearance [Required].
• Must be willing to obtain a CI Poly [Required].