ARS is seeking an Information System Security Officer (ISSO) to support Department of the Air Force information systems and cybersecurity operations at Hill AFB in Ogden, Utah.
The ISSO will help maintain the operational security posture of assigned information systems and Platform Information Technology (PIT), supporting Risk Management Framework (RMF) authorization activities, security control documentation, vulnerability and risk assessments, continuous security monitoring, and cybersecurity policy compliance. Working with the Information System Security Manager (ISSM), system owners, and technical teams, the selected candidate will safeguard the confidentiality, integrity, and availability of systems, networks, and data in accordance with applicable DoD and Air Force cybersecurity requirements.
Why Work with us?
Applied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.
Responsibilities include:
- Support RMF assessment and authorization (A&A) activities for information systems and Platform Information Technology (PIT), including preparation, review, and maintenance of security documentation, evidence, artifacts, and authorization packages.
- Maintain an appropriate cybersecurity posture for assigned systems by implementing and monitoring DoD and Air Force information security requirements, controls, processes, and procedures.
- Assist the ISSM with risk and vulnerability assessments of planned and operational systems; identify security gaps, evaluate risks, track corrective actions, and recommend mitigations.
- Conduct system security evaluations, audits, compliance reviews, and security control assessments; support continuous monitoring and remediation of identified findings.
- Develop, update, and maintain system security policies, procedures, configuration documentation, and RMF artifacts; support security requirements throughout system and network design and changes.
- Work with the ISSM to develop system-specific security contingency plans, incident response coordination procedures, and disaster recovery documentation.
- Support user cybersecurity awareness and adherence to established security policies; help implement safeguards to protect systems, networks, and data from unauthorized access.
- Coordinate with system administrators and IT teams on secure configuration, configuration management, technical implementation planning, baseline controls, troubleshooting, and protection of Windows, Linux, classified/unclassified, and applicable cloud or network environments.
- Support investigation-related evidence collection, analysis, and preservation as directed; coordinate cybersecurity activities and communicate security risks and status to authorized Government and contractor stakeholders.
- Perform other related information assurance, system administration coordination, and cybersecurity duties in accordance with the PWS.
- Other duties as assigned.
Qualifications/ Technical Experience Requirements:
- Must be a US citizen
- Active Top Secret clearance required.
- Meet one of the Journeyman education/experience paths: (1) at least 3 years of relevant experience; OR (2) bachelor’s degree in an interdisciplinary/relevant discipline (IRD) plus at least 2 years of relevant experience; OR (3) master’s degree in an interdisciplinary/relevant discipline (IRD) plus at least 1 year of relevant experience. All paths require IAT Level II qualification.
- Maintain a current DoD IAT Level II qualification/certification appropriate to the assigned role in accordance with DoD Manual 8140.03 and applicable successor guidance; the Unit ISSM determines role-specific qualification applicability.
- Working knowledge of DoD RMF, system authorization and accreditation, security control implementation, assessment evidence, security authorization artifacts, and continuous monitoring.
- Experience assessing information system security risks and vulnerabilities; conducting reviews or audits; documenting findings; and recommending mitigation or corrective actions.
- Knowledge of applicable DoD and Air Force cybersecurity policy, including DoDI 8510.01, AFI 17-101, AFI 17-130, and AFMAN 17-1303, as applicable to the supported environment.
- Demonstrated Journeyman-level ability to work independently within established procedures, troubleshoot security issues, coordinate with ISSMs and technical teams, and communicate technical risks and requirements clearly.
All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.
This contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.