83-015 - Information Systems Security Officer (ISSO) II

83-015 - Information Systems Security Officer (ISSO) II

Position Overview

Sandy Mac Evolution LLC is seeking an Information Systems Security Officer (ISSO) II to support Department of Defense Special Access Program environments at F.E. Warren AFB, Wyoming. The ISSO II maintains the operational security posture of assigned information systems and supports authorization documentation, configuration-management security-impact analysis, system reviews, vulnerability mitigation, audit activities, and day-to-day cybersecurity operations in Collateral, SCI, and SAP environments.

Key Responsibilities

Assist the ISSM in meeting assigned cybersecurity duties and responsibilities.

Prepare, review, and update system authorization packages and supporting bodies of evidence.

Ensure approved procedures exist for clearing, sanitizing, and destroying hardware and media.

Notify the ISSM of changes that may affect authorization determinations.

Conduct periodic reviews of information systems for compliance with approved security authorization packages.

Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.

Monitor system recovery processes to ensure security controls and procedures are restored and functioning correctly.

Ensure information-system security documentation remains current and accessible to authorized personnel.

Collect, review, and document audit records and anomalies.

Execute cybersecurity portions of self-inspections and provide security coordination/review for system assessment plans.

Identify cybersecurity vulnerabilities and assist with implementation of appropriate countermeasures.

Prepare reports on the status of security safeguards applied to information systems.

Perform ISSO duties in support of internal and external customers.

Conduct security-impact analyses for configuration-management changes to authorization boundaries and provide results to the ISSM.

Required Qualifications

2-5 years of related cybersecurity experience, with emphasis on developing RMF packages or other authorization bodies of evidence.

Prior performance in roles such as System Administrator, Network Administrator, or ISSO.

SAP experience is required.

Bachelor's degree or equivalent experience; a related bachelor's degree may count as four years of experience under program equivalency rules.

DoD 8570.01-M Information Assurance Manager (IAM) Level II compliance is required for this vacancy, in lieu of IAT Level II.

Knowledge of authorization packages, configuration management, vulnerability management, audit review, and RMF/A&A processes.

Must be able to regularly lift up to 50 pounds.

Security Requirements

Current active Top Secret/SCI eligibility is required.

Must be eligible for access to Special Access Program information.

Must be willing to submit to a Counterintelligence polygraph, as required by the task order.