Information Systems Security Officer

Modern Technology Solutions, Inc. (MTSI); Dayton (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Modern Technology Solutions, Inc. (MTSI) seeks an Information Systems Security Officer (ISSO) to protect government systems at WPAFB, OH. In-person role focusing on policy, compliance, and risk management, engaging with both technical and non-technical stakeholders.

The ideal candidate has 4+ years as an ISSO, DoD-style security experience, and certifications like Security+ or ISC2 CGRC. Responsibilities include RMF activities, continuous monitoring, and ensuring ATO readiness.

Qualifications

• 4+ years' ISSO experience with DoD-style security programs.
• Detail-oriented, capable of unsupervised or collaborative work.
• Experience supporting SAP/SCI networks (e.g., CV2, MORPHEUS, PLx, JWICS).
• Experience with COMSEC.

Responsibilities

• Security Policy Implementation: assist in development, implementation, and enforcement of security policies and procedures.
• Configuration Management: ensure secure configuration of information systems per DoD and policy baselines.
• Risk Management: conduct risk assessments and implement mitigation strategies.
• Security Compliance: ensure compliance with government and industry standards (NIST, JSIG, DoD).
• Continuous Monitoring: manage monitoring processes and review SIEM tools for anomalies.

Skills

ISSO experience

Attention to detail

SAP/SCI networks

COMSEC

Education

Bachelor's degree in IT-related field

Relevant experience may be accepted in lieu of a degree

Certifications: CompTIA Security+, ISC2 CGRC

Job description

How you will contribute to our National Security and Defense mission:

MTSI is seeking a highly motivated and experienced Information Systems Security Officer (ISSO) to support our team in safeguarding information systems for a government customer at WPAFB, OH. The ISSO will assist in the development, implementation, and maintenance of security policies, standards, and procedures to protect our information systems and ensure compliance with applicable government and industry regulations. The ideal candidate will possess a strong understanding of cybersecurity principles, risk management, and security technologies, as well as excellent communication and collaboration skills. This role requires a proactive individual capable of identifying and mitigating security threats, conducting security audits, and working effectively with both technical and non-technical stakeholders in both independent and team settings.This role is an in-person role that is located with our government customer's organization at WPAFB.

You'll be a great fit for this role if:

• You have a passion for aerospace, defense, and space systems and advanced technologies.
• You understand the urgent need to modernize our defense systems and give our troops the best possible tools.
• Paying attention to detail and providing excellent customer service in a professional environment is a skill you excel at.
• You are passionate about continuous learning and growth, and you seek opportunities to challenge yourself.
• You are driven to make a meaningful impact through your work.

Responsibilities

Your essential job functions will include but may not be limited to:

• Security Policy Implementation: Assist Information System Security Managers (ISSMs) in the development, implementation, and enforcement of security policies, standards, and procedures to ensure the protection of information systems and data.
• Configuration Management: Ensure that all information systems are configured securely according to DoD & organizational policies, industry’s best practices, and security baselines.
• Risk Management: Conduct risk assessments to identify potential security threats and vulnerabilities. Develop and implement mitigation strategies to reduce risk and ensure business continuity. Assess the impact of changes in the IT environment and update the risk management framework accordingly.
• Security Compliance: Ensure that information systems comply with relevant government and industry standards, such as NIST, JSIG, and DoD regulations. Demonstrate familiarity with RMF processes for assessments and authorization efforts to prepare and maintain documentation for ATO compliance activities.
• Continuous Monitoring: Implement and manage continuous monitoring processes to maintain compliance with ATO requirements. Review Security Information and Event Management (SIEM) tools (e.g., LogRhythm, Splunk) to monitor system activities, analyze logs, and identify & report suspicious behavior & anomalous findings.

Qualifications Required

• 4+ years' experience working as an ISSO
• Attention to detail and ability to work either unsupervised or in a group
• Experience with supporting enterprise SAP/SCI networks (e.g., CV2, MORPHEUS, PLx, JWICS)
• Experience with COMSEC

Education

• Bachelor's degree in an IT-related field (e.g., cybersecurity, computer science, computer engineering).
• Relevant experience may be accepted in lieu of a degree.
• Certifications: CompTIA Security+, ISC2 CGRC, or similar

Even Better If You Have These Desired Skills

• Experience with cloud technologies (AWS, Azure)
• Experience with SCIF/SAPF and physical security requirements
• Experience as COMSEC Responsible Officer (CRO) or alternate

Clearance Requirements

• Must possess an active DoD Top Secret (TS) security clearance (with SCI and SAP eligibility).