Information System Security Engineer

Employment Opportunities : University of Dayton, Ohio; Dayton (OH); On-site; USD 110,000 - 160,000; Full time

Job summary

University of Dayton is seeking an Information System Security Engineer (ISSE) to support the Air Force Rapid Sustainment Office (RSO) and DoD cybersecurity programs. The role requires RMF processing, ATO stewardship, and collaboration with government cybersecurity teams to ensure secure software-intensive systems.

The candidate will work with ISSO personnel, implement NIST SP 800-series controls, and contribute to successful RMF accreditation for multiple DoD systems while maintaining DoD 8570

Qualifications

• Bachelor degree and Security+ or equivalent DoD 8140/8570 certification requirements on hire
• 5+ years cybersecurity experience and 7+ years IT experience
• Must meet DoD 8570.01-M IAM Level II or higher on hire date
• Familiarity with DOD information assurance programs and RMF processes
• Experience with Secure Development Operations and NIST SP 800-53 controls

Responsibilities

• Work within ISSO team across multiple facilities
• Process RMF ATO packages and assist RMF activities
• Collaborate with client Cybersecurity team to meet goals
• Present status to management and client assessors to advance ATO
• Assess systems for vulnerabilities and recommend remediation
• Maintain documentation for RMF accreditation
• Apply DoD and NIST cybersecurity standards in DoD environment
• Support RMF status reporting to clients and assessors

Skills

Security engineering

RMF knowledge

Verbal and written communication

U.S. Citizen

DoD 8570 IAM Level II+

NIST RMF familiarity

Secret clearance eligibility

Education

Bachelor degree in Cybersecurity, Computer Science, IT, or related field

Tools

eMASS

Job description

Position Summary

Defend the Future. Secure the Mission. Description: The Information System Security Engineer (ISSE) position is supporting the Air Force Rapid Sustainment Office (RSO). The RSO increases mission readiness by rapidly identifying, applying and scaling technology essential to the operation and sustainment of the U.S. Air Force. Success comes from our teamwork and mutual respect for each other's talents and unique perspectives. This role supports the government cyber lead and provides cybersecurity support for advanced software-intensive technologies to include agile manufacturing, conditioned-based maintenance, augmented reality/virtual reality, learning neural networks, cloud-based infrastructure and services, and robotics.

Responsibilities

• Working within a team of Information System Security Officers (ISSO's) and system administrators at multiple facilities.
• Processing Risk Management Framework (RMF) Authority to Operate (ATO) packages for different systems in various steps of the RMF process.
• Work with Client's Cybersecurity team to ensure teams goals are met.
• Present status to team management, working with client assessors to move ATO packages through the RMF process.
• Assessing systems for vulnerabilities and providing corrective recommendations and solutions.
• Upload, answer, and address controls in eMASS.
• Supporting government Cyber lead in performing RMF activities leading to system RMF.
• Developing, reviewing, and updating necessary documentation associated with achieving RMF accreditation of each system.
• Applying currently accepted methods for documenting the RMF status of each RSO system within the DoD environment.
• Present status to client, work with client assessors to move ATO packages through the RMF process.
• DoDI 8500.01 -- Cybersecurity Risk Management Framework for DoD Information Technology.
• DoD 8140 / 8570.01 M - Information Assurance Training, Certification, and Workforce Management.
• CNSSI 1253 - Security Categorization and Control Selection for National Security Systems.
• NIST 800-series Special Publications (SP).
• Computer Security, including NIST SP 800-53 - Security Controls and Assessment Procedures for Federal Information Systems and Organizations and Air Force Instruction Series 17.

Minimum Qualifications

• Bachelor degree in Cybersecurity, Computer Science, IT, or related field
• Security+ certificate (equivalent DOD 8140 / 8570)
• 5+ years relevant cybersecurity experience
• 7+ years IT position experience
• Familiarity with Enterprise Mission Assurance Support Service (eMASS)
• The applicant must meet DoD 8570.01-M IAM Level II or higher certification requirements on hire date
• Familiarity with the DOD Information Assurance Vulnerability Management program
• Experience with Secure Development Operations Systems, as either a user, developer, or system administrator
• Effective verbal and written communication skills with clients at all levels
• Ability to pass a Secret level security clearance investigation
• Experience with the NIST RMF process
• Due to requirements of our research contracts with the U.S. federal government, candidates for this position must be a U.S. Citizen

Preferred Qualifications

• 8+ years' DoD cybersecurity experience
• Additive Manufacturing experience
• Experience with approved government cloud services such as Microsoft Azure, Amazon Web Services, Google Cloud
• Relevant cloud infrastructure and security certifications (MS Azure)
• Demonstrated successful collaboration within a multi-disciplinary team
Ability to promote inclusive excellence in the workplace

Closing Statement

Informed by its Catholic and Marianist mission, the University is committed to the dignity of every human being. Informed by this commitment, we seek to increase diversity in all of its forms, achieve fair outcomes, and model inclusion across our campus community. The University is committed to policies of affirmative action designed to increase the employment opportunities of individuals with disabilities and protected veterans in compliance with the Rehabilitation Act of 1973 and Vietnam Era Veterans' Readjustment Assistance Act of 1973.