Information System Security Officer (ISSO)

JAAW™ Group; Hill Air Force Base (UT); On-site; USD 90,000 - 130,000; Full time

Job summary

The JAAW Group LLC, a Service-Disabled Veteran-Owned Small Business, seeks an Information System Security Officer (ISSO) to support DoD systems at Hill Air Force Base, Utah. This role ensures cybersecurity posture, RMF/JSIG compliance, and authorization activities across classified information systems.

The ISSO will collaborate with the ISSM, security engineers, system admins, and other teams to implement controls, conduct monitoring, manage vulnerabilities, and maintain DoD documentation to

Qualifications

• Active DoD clearance required; Top Secret preferred.
• 3+ years as ISSO or similar role in cybersecurity compliance.
• Experience with RMF/JSIG processes and DoD security requirements.
• Familiarity with DISA STIGs and compliance tools.
• Experience with vulnerability assessment tools (Nessus, ACAS).
• Experience with SIEM platforms (Splunk).
• Experience with RMF documentation (SSPs, SAPs, SARs).
• Knowledge of cloud security concepts (AWS/Azure).

Responsibilities

• Support cybersecurity controls for classified DoD systems.
• Assist RMF/JSIG accreditation and authorization activities.
• Conduct continuous monitoring, vulnerability assessments, risk analysis, and compliance reviews.
• Track remediation activities through POA&Ms.
• Develop and maintain security documentation (SSPs, SAPs, SARs).
• Support ATO activities and system authorization requirements.
• Verify clearances and access needs.
• Review audit records and security events for concerns.
• Support DISA STIGs, CIS benchmarks, and other configuration requirements.
• Coordinate vulnerability remediation with IT teams.
• Support cybersecurity incident reporting and response.
• Assist with security for cloud environments (encryption, IAM, segmentation).
• Maintain accurate security records for audits and assessments.

Skills

Security clearance

RMF knowledge

JSIG knowledge

Vulnerability management

Documentation

Education

DoD 8570/8140 IAT Level II (or equivalent)

CASP+ or CISSP

Bachelor’s or Master’s in Cybersecurity/IA/CS

Tools

SCAP Compliance Checker

Evaluate-STIG

Nessus

ACAS

Splunk

eMASS

AWS

Azure security concepts

Job description

Information System Security Officer (ISSO)

Location: Hill Air Force Base, UT. Clearance Required: Secret; Top Secret preferred. Employment Type: Full-Time.

About the Role

The JAAW Group LLC, a Service-Disabled Veteran-Owned Small Business (SDVOSB), is seeking an Information System Security Officer (ISSO) to support secure, mission‑critical Department of Defense systems at Hill Air Force Base. This role is responsible for maintaining the cybersecurity posture and compliance of classified information systems while supporting Risk Management Framework (RMF), Joint Special Access Program Implementation Guide (JSIG), and authorization activities.

The ISSO will work closely with the Information System Security Manager (ISSM), Security Engineers, system administrators, and other technical teams to implement security controls, conduct continuous monitoring, manage vulnerabilities, maintain cybersecurity documentation, and ensure systems remain compliant with applicable DoD security requirements.

Responsibilities

• Support the implementation and maintenance of cybersecurity controls for classified information systems.
• Assist the ISSM with RMF and JSIG accreditation and authorization activities.
• Perform continuous monitoring, vulnerability assessments, risk analysis, and security compliance reviews.
• Track vulnerabilities and remediation activities through Plans of Action and Milestones (POA&Ms).
• Develop, maintain, and update cybersecurity documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and continuous monitoring documentation.
• Support Authorization to Operate (ATO) activities and ongoing system authorization requirements.
• Verify user security clearances, access authorizations, and need-to-know requirements.
• Review audit records and system security events for potential cybersecurity concerns.
• Support implementation and validation of DISA STIGs, CIS benchmarks, and other security configuration requirements.
• Participate in configuration control and change management processes to evaluate cybersecurity impacts.
• Coordinate vulnerability remediation activities with system administrators, engineers, and other technical teams.
• Support cybersecurity incident reporting, documentation, and response activities.
• Assist with security requirements for cloud environments, including encryption, identity and access management, and network segmentation.
• Maintain accurate security records and documentation in support of audits, assessments, and authorization activities.

Required Qualifications

• Active Secret security clearance required prior to onboarding; Top Secret preferred.
• U.S. citizenship required.
• DoD 8570/8140 IAT Level II certification, or ability to obtain the required certification within 3 months of hire.
• 3+ years of experience as an ISSO or in a comparable information assurance or cybersecurity compliance role.
• Strong working knowledge of RMF and JSIG processes and requirements.
• Experience supporting cybersecurity compliance, continuous monitoring, vulnerability management, and risk assessment activities.
• Familiarity with DISA STIGs and security compliance tools such as SCAP Compliance Checker and Evaluate-STIG.
• Experience with vulnerability assessment tools such as Nessus and ACAS.
• Familiarity with SIEM platforms such as Splunk.
• Experience supporting RMF documentation and authorization activities, including SSPs, POA&Ms, and ATO packages.
• Familiarity with eMASS or similar cybersecurity compliance management systems.
• Working knowledge of AWS and/or Microsoft Azure security concepts.
• Strong written and verbal communication, organization, and documentation skills.

Preferred Qualifications

• Active Top Secret security clearance with SCI eligibility.
• 5+ years of ISSO, information assurance, or cybersecurity compliance experience.
• DoD IAM Level II certification, such as CASP+ or CISSP.
• Bachelor's or Master's degree in Cybersecurity, Information Assurance, Computer Science, or a related field.
• AWS or Microsoft Azure security certifications.
• Experience with Microsoft Defender, Trellix, or similar endpoint security technologies.
• Experience supporting SOC or NOC operations.
• Familiarity with container security technologies, including Docker and Kubernetes.
• Experience supporting Department of Defense or other classified government environments.