Information System Security Officer (ISSO) III

The Amatriot Group; Lincoln (MA); On-site; USD 132,000 - 140,000; Full time

Job summary

The Amatriot Group is seeking an Information System Security Officer (ISSO) III at Hanscom AFB, MA, to maintain the security posture of DoD SAP/SCCI environments. Active TS/SCI is required, with CI Polygraph possible.

The role collaborates with the ISSM and ISO, manages RMF packages, and conducts continuous monitoring to ensure compliance and proper documentation for authorization.

Qualifications

• 5–7 years of RMF package development or evidence-building.
• Experience as ISSO, System/Network Administrator preferred.
• 2+ years of SAP experience.
• DoD 8570 IAM Level II or IAT Level II certification required.

Responsibilities

• Assist ISSM and maintain operational security posture.
• Manage day-to-day security operations for SAP/SCIF environments.
• Monitor systems and update authorization documentation.
• Coordinate changes with ISSM/AO before implementation.
• Prepare A&A support for DoD/contractor partners.

Skills

RMF expertise

C&A coordination

Security monitoring

Education

Bachelor's degree

4 years of related experience substituted for degree

Job description

Location: Hanscom AFB, MA

Security Clearance: Active TS/SCI [Required] (Must be able to obtain a CI Poly)

Job Type: Full-Time

Target Salary Range*: $132,000 - $140,000

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

The Information System Security Officer (ISSO) III is responsible for maintaining the operational security posture of assigned information systems in close collaboration with the Information System Security Manager (ISSM) and Information Security Officer (ISO). This role manages the day-to-day security operations of systems supporting Department of Defense (DoD) Special Access Programs (SAPs), including Collateral, Sensitive Compartmented Information (SCI), and SAP environments.

Key Responsibilities

Information System Security Management

• Assist the ISSM in meeting assigned duties and responsibilities.
• Maintain the appropriate operational security posture for assigned information systems.
• Manage the day-to-day security operations of assigned systems.
• Monitor information systems and their environments of operation.
• Develop and update system authorization documentation.
• Implement configuration management across authorization boundaries.
• Assess the security impact of system changes and provide recommendations to the ISSM.
• Notify the ISSM of changes that could affect system authorization determinations.
• Conduct continuous monitoring activities for assigned authorization boundaries.

Authorization and Compliance

• Prepare, review, and update authorization packages.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.
• Execute the cybersecurity portion of self-inspections, including security coordination and review of system assessment plans.
• Assist Department of Defense, National Agency, and contractor organizations with Assessment and Authorization (A&A) efforts.

Security Operations and Monitoring

• Ensure approved procedures are followed for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to verify security features and procedures are restored and functioning properly.
• Ensure all information system security documentation is current and accessible to authorized personnel.
• Ensure audit records are collected, reviewed, and documented, including identified anomalies.
• Identify cybersecurity vulnerabilities and assist with implementing countermeasures.
• Prepare reports on the status of security safeguards applied to computer systems.
• Perform ISSO duties in support of internal and external customers.

Security Training and Program Support

• Support physical and environmental protection, personnel security, incident handling, and security training and awareness activities.
• Provide day-to-day support for Collateral, SCI, and SAP activities.
• Attend required technical and security training related to assigned responsibilities.

Qualifications

Education

• Bachelor's degree [Required]
• Four (4) additional years of related experience may be substituted in lieu of a degree. [Required]

Experience

• Five (5) to seven (7) years of related experience, particularly developing RMF packages or bodies of evidence. [Required]
• Prior experience as a System Administrator, Network Administrator, or Information System Security Officer (ISSO). [Required]
• Two (2) or more years of Special Access Program (SAP) experience. [Required]

Certifications

• DoD 8570 IAT Level II or IAM Level II certification. [Required]

Clearance

• Active TS/SCI clearance. [Required]
• Must be willing to obtain a CI Polygraph. [Required]