55-019 – Information Systems Security Officer (ISSO) III

Position Overview

Sandy Mac Evolution LLC is seeking an Information Systems Security Officer III to support Department of Defense Special Access Program environments at Hanscom Air Force Base, Massachusetts.

The ISSO III is responsible for maintaining the appropriate operational security posture of assigned information systems and supporting day-to-day cybersecurity activities across Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments.

The selected candidate will work closely with the Information Systems Security Manager and other cybersecurity and information technology personnel to maintain authorization documentation, monitor system security, implement configuration-management requirements, assess security impacts associated with system changes, conduct continuous monitoring, and support assessment and authorization activities.

Key Responsibilities

• Assist the ISSM in meeting assigned cybersecurity duties and responsibilities.
  
• Prepare, review, and update information-system authorization packages.
  
• Ensure approved procedures are established for clearing, sanitizing, and destroying hardware and media.
  
• Notify the ISSM of system changes that may affect authorization status.
  
• Conduct periodic reviews of information systems to verify compliance with approved security authorization packages.
  
• Coordinate hardware, software, and firmware changes with the ISSM and applicable Authorizing Official or Designated Authorizing Official before implementation.
  
• Monitor system-recovery processes to ensure security features and procedures are properly restored.
  
• Ensure information-system security documentation remains current and accessible to authorized personnel.
  
• Ensure audit records are collected, reviewed, analyzed, and documented, including identified anomalies.
  
• Participate in required technical and cybersecurity training.
  
• Execute cybersecurity portions of self-inspections.
  
• Review and coordinate system assessment plans and related security documentation.
  
• Identify cybersecurity vulnerabilities and assist with implementation of appropriate countermeasures.
  
• Prepare reports regarding the status of security safeguards applied to information systems.
  
• Perform ISSO duties supporting internal and external customers.
  
• Conduct continuous monitoring activities for assigned authorization boundaries.
  
• Assist DoD, national agency, and contractor organizations with Assessment and Authorization activities.
  
• Support physical and environmental protection, personnel security, incident handling, and security awareness requirements associated with assigned systems.
  

Required Qualifications

• 5–7 years of related cybersecurity/information assurance experience.
  
• Demonstrated experience developing RMF authorization packages or Bodies of Evidence.
  
• Prior experience performing as a System Administrator, Network Administrator, ISSO, or similar cybersecurity role.
  
• Minimum 2 years of Special Access Program experience.
  
• Knowledge of information-system security requirements within classified environments.
  
• Experience with continuous monitoring, vulnerability management, configuration management, and authorization activities.
  
• Ability to work onsite at Hanscom AFB, Massachusetts.
  

Certification Requirement

• DoD 8570.01-M IAM Level II qualification is required in lieu of IAT Level II, in accordance with the current vacancy requirement.
  

Education

Bachelor’s degree in a related field or equivalent qualifying experience.

Security Requirements

• Current Top Secret eligibility with SCI eligibility.
  
• Current/in-scope background investigation, enrollment in Continuous Evaluation, or qualifying open periodic reinvestigation.
  
• Eligibility for access to Special Access Program information.
  
• Willingness to submit to a Counterintelligence polygraph.
  
• Must maintain required security eligibility throughout employment.
  

Additional Requirements

• Must be able to regularly lift up to 50 pounds.
  
• Must be able to perform duties onsite within classified Collateral, SCI, and SAP environments.