Information Assurance II Information System Security Officer (ISSO)

Position overview

DLS Engineering is seeking an Information Assurance II Information System Security Officer (ISSO) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.

As part of AFINC, the mission of the 26th Network Operations Squadron (26 NOS) is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). In the execution of its mission, the 26 NOS maintains network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks.

A day in the life

• Implements and enforce all cybersecurity policies, procedures, and countermeasures.
• Ensures all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to the system. Maintains all authorized user access control documentation.
• Ensures software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides /security requirement guides).
• Ensures proper configuration management procedures are followed prior to implementation and contingent upon necessary approval.
• Coordinate changes or modifications with the government. Initiates protective or corrective measures, in coordination with the government when a security incident or vulnerability is discovered.
• Reports security incidents or vulnerabilities to the designated representatives. Initiates exceptions, deviations, or waivers to cybersecurity requirements, as required.
• Participate in remanence security risk management processes.
• Process data loss prevention exemptions and removable media whitelist requests.
• Document the review of logs and audit trails at a minimum weekly, more frequently if required.
• Conduct removable media audits must be conducted at least annually, and logs must clearly show two-person control activity for all actions.

When I read the below it sounds like me

• 3+ years of experience in utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS. PPS.
• Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
• Experience in assessing and documenting test or analysis data to show cybersecurity compliance.
• Prior system administrator or network operator experience with devices supported in the contract.
• IAM-I Certification: CASP+, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, Security+ (CE), SSCP
• Must be certified in governance, risk, and compliance (CGRC)
• M ust be a US citizen
• Must hold a current Top Secret clearance with SCI Access (TS/SCI) or an active Secret clearance.

Other information

• We offer a competitive salary and a 401k program with company match.
• We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
• We offer a generous paid time off package
• If accommodation is needed with the application and / or the interview process for applicants with disabilities, please contact Human Resources at.
• DLS is an E-Verify company.
• DLS is an equal employment opportunity employer. Qualified applicants will receive consideration without regard to age, race, religion, sex (pregnancy, sexual orientation, gender identity), national origin, or disability. We encourage all qualified applicants to apply. If you believe you have been discriminated against, please contact Barbara Ellison. You also have the right to file a charge of discrimination with the equal employment opportunity commission.
• Must be able pass a government background check, which will be completed before employment.