Job Description

**Recruiters please do NOT contact Advent Services**

A leader in supporting clients in technically demanding industries, Advent's capabilities and services promote innovation & empower our partners to manage risk, protect the information, and achieve organizational objectives. We are proud of our ability to support mission-critical systems in every phase of their lifecycle to ensure our nation’s forces can accomplish their mission.

Position: INFORMATION SYSTEMS SECURITY OFFICER (ISSO)

Location: Work will be accomplished at the TSRL facility – Joint Base San Antonio-Fort Sam Houston, Building 3260, San Antonio, Texas.

Schedule: Work schedule is normally M-F 0700 to 1700.

Mandatory Qualifications

• The contractor employees shall possess a minimum of Associate of Science Degree in Information Technology or Cybersecurity demonstrated by a copy of the degree.
• The contractor employee shall have a minimum of one (1) year of demonstrated experience working Risk Management Framework (RMF) requirements and providing cybersecurity services.
• The contractor employee shall possess a current, valid Security Plus Certification.
• The contractor employee shall possess the required Information Technology or Cybersecurity education, training, or certifications IAW DoDM 8140.03 and current Government directives, regulations, and policies for the role, or labor category, it is fulfilling (reference DFARS 252.239-7001).
• The contractor employee shall possess Intermediate Level Cybersecurity Work Role experience.

Highly Desired Qualifications

• Possesses current Secret Clearance.

Tasks

• The contractor employee shall provide Information Systems Security Officer (ISSO), 8140 Cyberwarfare Code of 721 cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves/systems.

Enterprise Cybersecurity Support

• The contractor employee shall serve as a cybersecurity consultant for unit technicians.
• The contractor employee shall perform all tasks necessary to administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, and supplemental policy for the entire distributed AFRL organization.
• The contractor employee shall ensure Risk Management Framework (RMF) requirements are met, Authority to Operate (ATO) is granted and remains valid, all security-related documentation is kept up-to-date, and supported units have a reliable team of cybersecurity experts.
• The contractor employee shall assist in configuration management process reviews and maintenance to ensure appropriate secure mechanisms are in place, update RMF requirements, and support internal and external entity audits and inspections.
• The contractor employee shall perform data entry, monitoring, and provide AFRL organization assistance to maintain AFRL data and database organization structures within the IT portfolio in the Information Technology Investment Portfolio System (ITIPS), AFRL Risk Management Framework Workflow and Enterprise Mission Assurance Support Service (eMASS) systems.
• The contractor employee shall achieve and continuously maintain the Authorization to Operate (ATO) for TSRL, related subsystems; NIST 800-53, Rev 5, Security and Privacy Controls for Federal Information Systems and Organizations; Committee on National Security Systems Instruction No. 1253 (CNSSI 1253, Rev 4), Security Categorization and Control Selection for National Security Systems; DODI 8510.01, Risk Management Framework for DoD Systems; and DISAI 270-50-9, Life Cycle Sustainment Planning, among other risk management framework directives.
• The contractor employee shall advise senior management and Authorizing Official on risk levels, security posture, and changes affecting the organization’s cybersecurity posture.
• The contractor employee shall assess threats to and vulnerabilities of computer systems/enclaves to develop a security risk profile. Shall conduct technical risk assessments to identify, document, and mitigate vulnerabilities across computer systems and enclaves.
• The contractor employee shall collect and maintain data needed to meet system/enclave cybersecurity reporting. Shall maintain a digital eMASS system package repository on the authorized Information System (IS).
• The contractor employee shall administer and track all relevant systems/enclaves within Enterprise Mission Assurance Support Service (eMASS) and ensure the ATO is current.
• The contractor employee shall prepare, distribute, and maintain plans, instructions, and standard operating procedures (SOPs) concerning system security, for example; Body of Evidence documents, System Security Plans, Security Assessment Reports (SAR), Plan of Actions and Milestones (POAM), risk assessment reports, topology diagrams, software lists, and hardware list.
• The contractor employee shall ensure plans of action and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.
• The contractor employee shall maintain artifacts specified within the ATO/eMASS package such that they can be inspected semi-annually and any changes to ATO required documentation must be uploaded as an artifact in eMASS within three (3) business days.
• The contractor employee shall maintain system hardening checklists (STIGs) and implement documented remediation plans (fix-actions) to resolve findings from official cybersecurity audits and inspections.
• The contractor employee shall support cybersecurity inspections and audits by internal and external Government agencies, as necessary.
• The contractor employee shall coordinate with the TSRL IT lead to implement changes within eMASS; implement, assess, manage, and monitor eMASS security controls and eMASS assessment procedures (APs); shall ensure precautions are in place such that other team members’ eMASS data is not erroneously overwritten.
• The contractor employee shall utilize Assured Compliance Assessment Solution (ACAS), or other AF-approved scanning software, to accomplish audit controls and interpret vulnerability scanner results to identify vulnerabilities.
• The contractor employee shall conduct application vulnerability assessments and perform technical and non-technical risk and vulnerability assessments of relevant technology focus areas to include applications/software.
• The contractor employee shall ensure implementation of Information Assurance Vulnerability Management (IAVM) dissemination, reporting, and compliance procedures.
• The contractor employee shall apply cybersecurity strategy to cloud computing service and deployment models.
• The contractor employee shall perform applicable training and ensure cybersecurity training requirements have been satisfied by all TSRL users for continued network access.
• The contractor employee shall execute logical system access onboarding and offboarding programs, for example maintaining up-to-date Standard Operating Procedures (SOPs) for the submission and routing of DD Form 2875s, and serving as the central coordinator for all organizational accounts.
• The contractor employee shall schedule and complete quarterly destruction of media in accordance with AF and local policies.
• The contractor employee shall attend in-person or virtual cybersecurity-related meetings, as required, and provide meeting minutes to support RMF requirements.
• The contractor employee shall collaborate in system discovery and unit discussions to categorize systems for entry into eMASS, engineer compliant cybersecurity solutions, and develop organizational security policies. Shall assist with all hardware and software entry/exit requirements pertaining to TSRL, as dictated by policy.
• The contractor employee shall assist with managing all TSRL Memorandums of Agreement (MOA), Memorandums of Understanding (MOU), and Acknowledgement of Responsibility (AOR) Letters between the division and external customers for the RMF Accreditation Program. Shall assist in updating these documents annually and conduct complete reviews every three (3) years. Shall courier classified equipment or media to approved destinations throughout TSRL in accordance with applicable security regulations.

Workforce Development

• The contractor employee shall perform tracking and reporting of DOD Directive (DoW) 8140.03 certification requirements for appropriate personnel within TSRL. Shall participate in DoW 8140.03 telecons and meetings as appropriate and work with the Government lead to develop reporting metrics and briefings related to DoDD 8140.03 compliance.

Cybersecurity Working Group

• The contractor employee shall support the AFRL Cybersecurity Working Group (CSWG). Shall be required to participate in and support monthly Video Teleconferencing meetings and perform roll call, note taking, track actions and facilitating projects. The contractor employee shall gather requirements and assist with developing documentation, for example, processes concepts of operation, implementation standards, and policies with respect to AFRL Cybersecurity related efforts. Shall brief DoW, Joint, AF, AFRL and industry senior leaders concerning S&T related IT and Cybersecurity related efforts and recommendations.

Customer Service

• The contractor employee shall provide customer service support to the unit. Support will be rendered by fielding questions from users regarding cybersecurity and other cyber related topics. Shall provide assistance to customer regarding process and policies understanding and interpretation. Also provide guidance and recommendations regarding cybersecurity configurations and implementation.

AFRL Inspector General (IG)

• The contractor employee shall support the Inspection Functional Lead (IFL) for the Comm functional area in pre and post inspection activities.

Enterprise Pilot Project

• The contractor employee shall support research, selection, implementation, operations, metrics collection, and reporting of IT pilot or exploratory projects in support of TSRL that have enterprise applicability and potential for enterprise-wide improvements in capability, efficiency, and improved cybersecurity. The projects can be a wide variety of technology areas including cybersecurity, server virtualization, desktop virtualization, collaborative systems, multi- platform research computing, mobile technologies, automated IT systems management, and public/private/hybrid cloud services.