Information System Security Officer

University of Dayton Research Institute; Dayton (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

University of Dayton Research Institute in Dayton, OH seeks an Information System Security Officer (ISSO) to support the Air Force Rapid Sustainment Office. The role focuses on RMF-based cybersecurity for advanced software-intensive systems on cloud, networked, and standalone configurations.

The ISSO will advise government cyber leads, coordinate RMF activities, and ensure security controls, documentation, and accreditation are maintained in compliance with DoD and AF policies.

Qualifications

• Associates Degree in Cybersecurity, Computer Science, or related field.
• 3+ years of cybersecurity experience.
• Experience with the NIST RMF process.
• STIGs application experience.
• DoD 8140 compliance: IAT Level II or higher (Security+ CE) on hire.
• Familiarity with the DoD Vulnerability Management program.
• Effective verbal and written communication skills.
• Ability to obtain a Secret level security clearance.
• US Citizenship.
• Eight years of directly related experience (R3 requirement).
• 5+ years DoD cybersecurity experience (preferred).
• IAT Level III or IAM Level I Certification (preferred).
• Bachelor’s Degree in Cybersecurity, Computer Science, or related field (preferred).

Responsibilities

• Serve as cybersecurity advisor and primary point of contact to the Program Manager, IS Owner, and stakeholders for information systems.
• Assess systems for vulnerabilities and provide corrective recommendations.
• Support RMF activities and planning leading to DoD RMF acceptance.
• Monitor system security posture and ensure adverse events are reported.
• Develop, review, and update RMF accreditation documentation.
• Apply RMF documentation methods within the DoD environment.
• Implement Security Technical Implementation Guides (STIGs) across systems.
• Manage RMF-compliant projects and DoD/AF policy adherence.

Skills

Verbal communication

Written communication

RMF familiarity

STIGs experience

Security clearance eligibility

Education

Associates Degree in Cybersecurity or related field

Bachelor’s Degree in Cybersecurity or related field

Tools

eMASS

RMF tooling

Job description

Position Summary

Secure Innovation. Strengthen Readiness.

The Information System Security Officer (ISSO) position is supporting the Air Force Rapid Sustainment Office (RSO). The RSO increases mission readiness by rapidly identifying, applying and scaling technology essential to the operation and sustainment of the U.S. Air Force. Success comes from our teamwork and mutual respect for each other’s talents and unique perspectives.

This role supports the government cyber lead and provides cybersecurity support for advanced software-intensive technologies to include agile manufacturing, conditioned-based maintenance, augmented reality/virtual reality, cloud-based infrastructure and services, and robotics.

Responsibilities

• Serve as cybersecurity technical advisor, consultant, and primary point of contact to the Program Manager, Information System Owner, and other stakeholders for the Information systems
• Assessing systems for vulnerabilities and providing corrective recommendations.
• Supporting government Cyber lead in performing RMF activities leading to system RMF acceptance IAW DoDI 8510.01, NIST 800-series special publications, USAF policy and instructions, and guidance as applicable on RSO IT systems in networked, standalone, and cloud configurations.
• Support, coordinate, and continuously monitor system security posture and ensure adverse events are formally handled and reported
• Developing, reviewing, and updating necessary documentation associated with achieving RMF accreditation of each system.
• Applying currently accepted methods for documenting the RMF status of each RSO system within the DoD environment.
• Security Technical Implementation Guides (STIGs) for all systems
• Managing projects in compliance with DoD and AF RMF policies including but not limited to the following:
• DoDI 8500.01 – Cybersecurity Risk Management Framework for DoD Information Technology.
• DoD 8140 (formerly 8570)
• CNSSI 1253 - Security Categorization and Control Selection for National Security Systems.
• NIST 800-series Special Publications (SP).
• Computer Security, including SP 800-53 - Security Controls and Assessment Procedures for Federal Information Systems and Organizations and Air Force Instruction Series 17.

Cyberspace

Accomplishing system categorization, security control selection, security control implementation, security control assessment, and security control monitoring, including, but not limited to, accomplishing the RMF steps as outlined in DoDI 8510.01 on a system-by-system basis

• Providing system performance reporting.
• Support System Administrator for multiple cloud projects and implementations.
• Supporting Interim Authority to Test (IATT)/ Authority to Operate (ATO) planning and execution.

Minimum Qualifications

R2 Level Qualifications:

• Associates Degree in Cybersecurity, Computer Science, or related field
• 3+ years relevant cybersecurity experience
• Experience with the NIST RMF process
• Security Technical Implementation Guides (STIGs) application experience
• The applicant must meet DoD 8140 (formerly 8570) Compliance: IAT Level II or higher certification requirements on hire date (Security+ CE)
• Familiarity with the DOD Information Assurance Vulnerability Management program
• Effective verbal and written communication skills
• Ability to obtain a Secret level security clearance
• US Citizenship

An R3 must meet all R2 minimum qualifications in addition to the qualifications listed below.

• A minimum of eight years of directly related experience

Preferred Qualifications

While not everyone may possess all of the preferred qualifications, the ideal candidate will bring many of the following:

• 5+ years’ DoD cybersecurity experience
• IAT Level III or IAM Level I Certification
• Bachelor’s Degree in Cybersecurity, Computer Science, or related field
• Additive Manufacturing experience
• Systems Administration experience
• Experience with Secure Development Operations Systems, as either a user, developer, or system administrator
• Experience with submission of system security package to DoD for ATO, IATO, etc
• Active Secret level security clearance.
• Familiarity with Enterprise Mission Assurance Support Service (eMASS).
• Experience with approved government cloud services such as Microsoft Azure, Amazon Web Services, Google Cloud.
• Relevant cloud infrastructure and security certifications (i.e. Office365, SharePoint, Amazon AWS)
• Cloud Application experience
• Experience managing various project activities ensuring accurate task completion

Closing Statement

Informed by its Catholic and Marianist mission, the University is committed to the dignity of every human being. Informed by this commitment, we seek to increase diversity in all of its forms, achieve fair outcomes, and model inclusion across our campus community. The University is committed to policies of affirmative action designed to increase the employment opportunities of individuals with disabilities and protected veterans in compliance with the Rehabilitation Act of 1973 and Vietnam Era Veterans' Readjustment Assistance Act of 1973.