Information System Security Officer

Odyssey; Ogden (UT); On-site; USD 90,000 - 130,000; Full time

Job summary

Odyssey seeks a Journeyman Information System Security Officer (ISSO) to support AFLCMC/EBH at Hill AFB, UT. You will safeguard DoD/AF information systems, align RMF, and maintain security posture across networks and data.

Working with the ISSM, you will perform risk assessments, support accreditation activities, and ensure compliance with STIGs/SRGs, access controls, and training requirements in a demanding DoD environment.

Qualifications

• U.S. citizenship required.
• Current Secret clearance.
• IAT Level II certification required.
• Bachelor's or higher in a related discipline with IAT II and relevant experience.

Responsibilities

• Ensure DoD/AF cyber requirements are met per the ISSM.
• Develop, implement, and maintain cybersecurity programs, policies, and tools.
• Support RMF authorization, accreditation activities, and artifact creation.
• Perform risk and vulnerability assessments and propose mitigations.
• Maintain security posture and compliance artifacts for systems and networks.
• Assist in documenting contingency and disaster recovery plans.
• Monitor cybersecurity incidents and coordinate response actions.

Skills

IAT Level II

Security monitoring

Compliance awareness

Education

Bachelor's degree in related discipline

Master's degree in related discipline

IAT Level II certification

Tools

DoD RMF tooling

STIG/SRG knowledge

Job description

Position Summary

Odyssey has an exciting opportunity for a Journeyman Information System Security Officer (ISSO) supporting the Air Force Life Cycle Management Center Armament Directorate Munitions Division (AFLCMC/EBH) at Hill AFB, UT.

This role supports the protection, accreditation, and ongoing security posture of Air Force information systems. In this role, you will work closely with the Information System Security Manager (ISSM) to ensure systems meet all DoD and Air Force cybersecurity requirements, align with the Risk Management Framework (RMF), and maintain the confidentiality, integrity, and availability of critical networks and data. You will conduct risk assessments, support accreditation activities, evaluate system security controls, and help enforce policies, configurations, and user access standards. Additional responsibilities include monitoring for vulnerabilities, assisting with incident response actions, maintaining compliance artifacts, and supporting secure system design efforts.

This position requires strong attention to detail, a commitment to cybersecurity excellence, and the ability to collaborate across technical and leadership teams.

Responsibilities

Duties may include, but are not limited to:

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need‑to‑know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.

Qualifications

Minimum Required Qualifications

Citizenship: Must be a US Citizen

Clearance: Current Secret clearance

Education And Experience

• Highschool diploma or equivalent and 3 years of related experience AND current IAT Level II certification; OR Bachelor’s degree in a related discipline and 2 years of related experience AND current IAT Level II certification; OR Master’s degree in related discipline and 1 year of related experience and current IAT Level II certification
• IAT certifications include Security+, GSEC, CCNA‑Security, Certified Systems Security Professional (CISSP), or similar
• Must be able to maintain required cybersecurity certifications in accordance with AFMAN 17‑1303.

Preferred Qualifications

• Experience monitoring, identifying, analyzing, and mitigating cybersecurity vulnerabilities and threats.
• Experience working within classified, sensitive, or mission‑critical DoD environments.
• Experience supporting the DoD Risk Management Framework (RMF), including authorization, accreditation, assessment, and continuous monitoring activities.
• Experience developing and reviewing contingency plans, disaster recovery plans, and continuity of operations documentation.
• Experience maintaining system security posture and supporting continuous cybersecurity improvement efforts.

Technical Skills

Additionally, the successful candidate will demonstrate the following:

• Knowledge of Department of Defense (DoD) and Air Force cybersecurity policies, directives, and compliance requirements.
• Understanding of information assurance, cybersecurity principles, and best practices for protecting system confidentiality, integrity, and availability.
• Ability to develop, maintain, and review cybersecurity documentation, artifacts, security plans, and accreditation packages.
• Knowledge of system security architecture and secure system/network design principles.
• Understanding of change management processes and cybersecurity impact analysis.
• Proficiency with security monitoring, vulnerability scanning, and cybersecurity management tools.

Interpersonal Skills

• Excellent written communication skills for preparing documentation, compliance artifacts, audit reports, and security findings.
• Strong verbal communication skills with the ability to explain technical cybersecurity concepts to both technical and non‑technical audiences.
• Exceptional attention to detail and commitment to accuracy in compliance and documentation activities.
• Strong analytical and problem‑solving abilities for identifying risks, vulnerabilities, and effective mitigation strategies.
• High degree of professionalism, integrity, and accountability when handling sensitive information.

Additional Information

Location: Eglin AFB, FL

Travel: May be required up to 10% depending on program needs

Work Environment: Onsite

Company Overview

Odyssey is a world‑class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain‑specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.

Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.