Cybersecurity (ISSM)

Astrion; Dayton, Bath Township (OH, OH); On-site; USD 120,000 - 160,000; Full time

Job summary

Astrion is seeking a Cybersecurity (ISSM) professional for Wright Patterson AFB, OH. The role requires Top Secret clearance, US citizenship, and strong RMF/cyber security engineering experience to support acquisition programs and QRCs.

The contractor will develop, analyze, and defend cyber security artifacts, implement RMF across life cycles, and provide expert guidance on risk, policy, and compliance for DoD programs.

Qualifications

• Master’s/Doctorate in a related field with 10 years experience, 5 in DoD.
• Bachelor’s in a related field with 12 years of exp, 5 in DoD.
• 15 years of related experience with proper certifications as described, 8 in DoD.
• Certifications: CISSP.

Responsibilities

• Provide cyber security engineering support for traditional acquisition programs and QRCs.
• Implement RMF processes for weapon systems and develop cyber security artifacts.
• Develop risk-reduction policies and continuous monitoring procedures.
• Evaluate threat data and provide residual risk recommendations to senior DoD and AF leadership.
• Review platform IT determinations, cyber strategies, system security plans, and RMF artifacts.

Skills

RMF knowledge

Cybersecurity engineering

Threat assessment

DoD experience

Education

Master’s or Doctorate in related field

Bachelor’s in related field

CISSP certification

Job description

Overview

Cybersecurity (ISSM)

LOCATION:WPAFB, Dayton, OH

JOB STATUS:Full-Time

CLEARANCE: Top Secret, Must be a US Citizen

TRAVEL: 10%

Astrion has an exciting opportunity for aCybersecurity (ISSM)position at Wright Patterson AFB, OH. This is part of the ISR/SOF Directorate (AFLCMC/WI), which is responsible for equipping our warfighters to win the fight. The Directorate executes a $22 billion acquisition portfolio developing, producing, testing, modifying, fielding, and supporting Air Force ISR and SOF platforms, and related sub-systems.

Required Qualifications:

• Master’s or Doctorate Degree in a related field and ten years of experience in the respective technical / professional discipline being performed, five years of which must be in the DoD.
• OR bachelor’s degree in a related field and 12 years of experience in the respective technical/professional discipline being performed, five of which must be in the DoD.
• OR, 15 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, eight of which must be in the DoD.
• Certifications: CISSP

Responsibilities:

• The Contractor will have demonstrated experience related to acquisition platform and cyber security and possess a knowledge base in Risk Management Frameworks (RMF), cyber security strategies, developing cyber resilient System of Systems (SoS), systems engineering, network engineering, and technical interface design to ensure weapon systems meet cyber resilient and system security. It is required for the contractor to have CAP (Certified Authorization Professional) certification, Now CGRC (Certified in Governance, Risk, & Compliance) and it is highly recommended to have CISSP (Certified Information Systems Security Professional).
• The Contractor will provide cyber security engineering support for traditional acquisition programs as well as Quick Reaction Capabilities (QRC) in a rapid acquisition development environment with minimal government oversight.
• The Contractor will be responsible for implementing all phases of the RMF processes for weapon systems that will generate both unclassified and classified information.
• The Contractor will develop and analyze cyber security engineering artifacts used to support the Assessment and Authorization (A&A) process leading to a successful ATO decision.
• The Contractor will develop risk reduction-based policies and procedures and develop comprehensive cyber security processes to include implementation of continues monitoring.
• The Contractor will develop the Cyber Security Impact Evaluation Recommendation to assess changes on the system in support of the continuous monitoring plan.
• The Contractor will document system architectures, utilizing OEM documentation and system interface specifications, to support the cyber analysis, identification, selection and tailoring of security and privacy controls necessary to protect the system.
• the contractor will develop, modify, review and coordinate Platform Information Technology (PIT) determination packages, cyber security strategies, system security plans, and RMF artifacts for program review.
• The Contractor will provide expert level evaluation of designs and proposed implementation solutions to defend weapon systems and critical networks against malicious and non‑malicious exploitation throughout the full acquisition life cycle of portfolio programs.
• The Contractor will evaluate threat data and develop residual risk recommendations and mitigations to senior DoD and AF leadership based on identification and analysis of weapons vulnerabilities.
• The Contractor will research threat products and develop suitable defense measures, evaluate system changes for security implications, and recommend enhancements, research, and draft cyber security white papers, and provide recommendations to the program manager.
• The Contractor will review and analyze interoperability requirements and will review, develop and evaluate resultant specifications and internal and external ICDs.
• The Contractor will review and propose technical recommendations at both the strategic and operational levels regarding critical technologies requiring protection, Program Protection Plans (PPP), and Anti‑Tamper (AT) plans, cyber findings, vulnerabilities, and risks.
• The Contractor will review and/or document the systems Critical Program Information/Critical Technology (CPI/CT) and provide recommendations to the system’s Chief of Security and the Program Manager.
• Cybersecurity engineering support contractors will be required to have access to classified material and classified information systems to include the Secret Internet Protocol Router Network (SIPRNet) and the Joint Worldwide Intelligence Communications System (JWICS).