Cybersecurity, Journeyman (ISSO)

starfish; Montgomery (AL); On-site; USD 80,000 - 110,000; Full time

Job summary

Torch Technologies is seeking a Cybersecurity Journeyman (ISSO) to support the CMOS and MARKS programs. The role focuses on maintaining security posture, enforcing AF cybersecurity policies, and ensuring proper access controls and training for all users within DoD transportation systems.

The candidate will coordinate with ISSM and Wing cybersecurity offices, manage documentation, and implement security configurations per STIGs and NIST standards.

Qualifications

• Bachelor's or Master's degree in a related field and at least three years of experience, or seven years with proper certifications.
• Experience with RMF, eMASS, Authority to Operate (ATO), and DoD cybersecurity supervision requirements.

Responsibilities

• Maintain operational security posture for assigned IT systems.
• Enforce AF cybersecurity policies, procedures, and countermeasures.
• Complete required cybersecurity certification per AFMAN 17-1303.
• Ensure users have proper clearances and annual cybersecurity training.

Skills

Cybersecurity

RMF

NIST standards

DoD knowledge

Education

Bachelor's degree

Master's degree

Tools

RMF tooling

eMASS

ATO

CSF

Job description

Torch Technologies Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation's top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: "Lighting the Pathway of Freedom". And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking a Cybersecurity Journeyman (ISSO) to join the Transportation Systems Family: Cargo Movement Operations System (CMOS), Online Vehicle Interactive Management System (OLVIMS), Movement Automated Record Keeping System (MARKS). CMOS is a joint use program. Air Force, Army, Navy, Marine Corps, National Security Agency, and Defense Contract Management Agency transportation activities use CMOS to automate and streamline base level cargo movement processes and support rapid movement of military assets worldwide. CMOS is a DoW directed program which addresses critical shortfalls in moving cargo and people in support of the DoW mission. CMOS automates and streamlines base-level cargo movement processes in peacetime as well as cargo and passenger movements during contingencies. OLVIMS Dispatch is utilized by Vehicle Operations personnel to manage transportation requests, dispatch vehicles and manage driver utilization. The application is also used to issue and track Air Force Motor Vehicle Operator Identification Cards (driver licenses) and Driver Records, to include vehicle qualifications, restrictions, certifications, and violations. MARKS is part of the Headquarters Air Force Logistics, Engineering & Force Protection (AF/A4) portfolio and used to support household good shipments of military members and authorized DoW civilians. HQ Personal Property Activity (HQ PPA) utilizes MARKS to receive, track, and store all documentation related to the shipment of household goods. MARKS captures, routes, manages, shares and archives high volumes of personnel information (over 7 terabytes) critical to support household-good shipments of military members and authorized DoW civilians. Users of ONBASE include Joint Personal Property Shipping Office (JPPSO), Personal Property Processing Office (PPPO), Defense Finance Accounting Service, Claims Offices, and Housing Offices. This position supports GBS.

As a Cybersecurity Journeyman, your duties will include but will not be limited to:

• Ensure the appropriate operational security posture is maintained for the assigned IT.
• Implements and enforce all AF cybersecurity policies, procedures, and countermeasures;
• Completes and maintains required cybersecurity certification IAW AFMAN 17-1303;
• Ensures all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to the IT according to AFMAN 17-1301;
• Maintains all authorized user access control documentation IAW the applicable AF Records Information Management System;
• Ensures software, hardware, and firmware comply with appropriate security configuration guidelines, e.g., security technical implementation guides/security requirement guides;
• Ensure proper configuration management procedures are followed prior to implementation and contingent upon necessary approval;
• Coordinate changes or modifications with the system-level ISSM, SCA, and/or the Wing Cybersecurity office;
• Initiates protective or corrective measures, in coordination with the ISSM, when a security incident or vulnerability is discovered;
• Reports security incidents or vulnerabilities to the system-level ISSM and wing cybersecurity office according to AFI 17-203, Cyber Incident Handling; and,
• Initiates exceptions, deviations, or waivers to cybersecurity requirements.

Required Qualifications:

• Bachelor's or Master's Degree in a related field and at least three years of experience in the respective technical/professional discipline being performed, three of which must be in the DoW OR, seven years of directly related experience with proper certifications, five of which must be in the DoW.
• Specific Work Experience: Risk Management Framework, eMASS, Authority to Operate, provide the PMO/Capability Development Manager (CDM) cybersecurity support per DoWI 8500.01. Support includes assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as Risk Management Framework (RMF), Cybersecurity Framework (CSF), and National Institute of Standards and Technology (NIST) and per Authorization Official's Information System's Continuous Monitor