Information Systems Security Officer (ISSO) II

The Amatriot Group; Warner Robins (GA); On-site; USD 106,000 - 107,000; Full time

Job summary

The Amatriot Group at Robins AFB, GA is seeking a Security Specialist to maintain the operational security posture of DoD information systems in close collaboration with the ISSM and ISO. You will manage security operations, documentation, risk assessment, and training to keep systems compliant.

Responsibilities include developing RMF packages, performing security impact analyses, coordinating changes across authorization boundaries, and providing ISSO duties for DoD customers.

Qualifications

• Bachelor’s degree with 2 years of experience, associate’s degree with 4 years of experience, or 6 years of experience with no degree.
• 2–5 years of related experience, especially in developing RMF packages or bodies of evidence.
• Prior performance in roles such as System/Network Administrator or ISSO.
• SAP experience.

Responsibilities

• Maintain the appropriate operational security posture of information systems in collaboration with the ISSM and ISO.
• Manage system security aspects and day-to-day security operations including physical and environmental protection, personnel security, incident handling, and security training.
• Develop and update authorization documentation, implement configuration management, assess security impact of changes.

Skills

RMF packages

System/Network Administration

IA/Cybersecurity

Security monitoring

Education

Bachelor’s degree or higher

Associate’s degree + 4 years

6 years experience (no degree)

Tools

RMF knowledge

DoD 8510 RMF

Job description

Location: Robins AFB, GA
Security Clearance: Active TS/SCI [Required] Must be able to obtain a CI Poly
Job Type: Full-Time
Target Salary Range*: $106,000 - $106,500

• This represents the potential salary range for this position depending on education level, years of experience and/or certifications in addition to other position specific requirements which may impact salary

Position Overview

Maintain the appropriate operational security posture of information systems in close collaboration with the ISSM and ISO. Manage system security aspects and day-to-day security operations, including physical and environmental protection, personnel security, incident handling, and security training and awareness.
Monitor information systems and their operating environments, develop and update authorization documentation, and implement configuration management across authorization boundaries. Assess the security impact of changes and provide recommendations to the ISSM.
Support Special Access Programs (SAPs) for Department of Defense (DoD) agencies, including HQ Air Force, the Office of the Secretary of Defense (OSD), and Military Compartments efforts. Provide day-to-day support for Collateral, Sensitive Compartmented Information (SCI), and SAP activities.

Key Responsibilities

Security Authorization and Documentation

• Assist the ISSM in fulfilling their duties and responsibilities.
• Prepare, review, and update authorization packages.
• Conduct periodic information system reviews to ensure compliance with security authorization packages.
• Keep information system security documentation current and accessible to properly authorized individuals.
• Prepare reports on the status of security safeguards applied to computer systems.

Configuration Management and Security Impact Analysis

• Notify the ISSM of changes that may affect information system authorization determinations.
• Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO before implementation.
• Conduct security impact analyses of all configuration management changes to authorization boundaries and provide results to the ISSM.

Security Operations and Safeguards

• Ensure approved procedures are in place for clearing, sanitizing, and destroying hardware and media.
• Monitor system recovery processes to ensure security features and procedures are restored and functioning correctly.
• Ensure audit records are collected, reviewed, and documented, including anomalies.
• Identify cybersecurity vulnerabilities and assist in implementing countermeasures.
• Perform ISSO duties for in-house and external customers.

Security Assessments and Training

• Execute the cybersecurity portion of self-inspections, including security coordination and review of all system assessment plans.
• Attend required technical and security training relevant to assigned duties, including operating systems, networking, and security management.

QualificationsEducation

• Bachelor’s degree with 2 years of experience, associate’s degree with 4 years of experience, or 6 years of experience with no degree. [Required]

Experience

• 2–5 years of related experience, especially in developing RMF packages or bodies of evidence. [Required]
• Prior performance in roles such as System/Network Administrator or ISSO. [Required]
• SAP experience. [Required]

Certifications

• IAT Level II or IAM Level II. [Required]

Clearance

• TS/SCI; must be willing to obtain a CI Poly. [Required]