Information Systems Security Officer (ISSO) SE-3

Odyssey; Florida; On-site; USD 110,000 - 170,000; Full time

Job summary

Odyssey is seeking an Information Systems Security Officer (ISSO) to lead RMF A&A activities for classified DoD systems at Eglin AFB, FL. You will develop security documentation, implement security controls, and coordinate with ISSM, government customers, and internal teams.

The role requires Active Secret clearance (TS/SCI/SAP potential), 3–10 years in cybersecurity, and a technical bachelor’s degree. Onsite work with up to 10% travel to CONUS/OCONUS locations is expected.

Qualifications

• U.S. citizenship required
• Active Secret clearance with ability to obtain TS/SCI and SAP access
• Bachelor's degree in a technical field with 3+ years relevant cybersecurity experience
• 3–10 years of cybersecurity experience
• Certifications: Security+, SecurityX, Cloud+
• Certifications: CISSP-ISSMP, CISM, GCIA/GCIH/GSLC (as applicable)
• Experience with RMF, NIST 800-53, JSIG, and A&A documentation
• Experience with vulnerability assessments and configuration management
• Experience generating formal cybersecurity documentation and reports

Responsibilities

• Lead RMF A&A lifecycle for classified information systems
• Implement, assess, and monitor security controls to safeguard classified networks
• Perform vulnerability assessments, STIG evaluations, and ACAS scans
• Perform Security Impact Assessments and configuration management
• Support incident response activities and reporting
• Prepare and maintain SSPs, RA/RARs, POA&Ms, and ATO packages
• Ensure documentation is current and accessible
• Develop security awareness training for personnel
• Interface with government customers, suppliers, and internal stakeholders
• Oversee designs for diverse computing environments with multiple classification levels

Skills

Strong communication

Team collaboration

Policy compliance

RMF/risk management

Security documentation

Education

Bachelor's degree in a technical field

Tools

ACAS

STIG evaluations

RMF

A&A documentation

POA&Ms

Job description

Position Summary

Odyssey has an exciting opportunity for an Information Systems Security Officer (ISSO) SE-3 supporting the 46 Test Squadron - Sensors and Defensive Systems Flight (46 TS/TGBB) at Eglin AFB, FL. Working closely with the Information Systems Security Manager (ISSM), the ISSO will support Assessment & Authorization (A&A) activities for classified systems used by test engineers and data analysts. The ISSO will develop, maintain, and implement security documentation; define cybersecurity requirements for new and existing systems; and assist in the enforcement of security policies and standards for highly sensitive DoD/SAP environments. This is a full-time, onsite position at Eglin AFB, FL, with <10% CONUS/OCONUS TDY travel.

Responsibilities

Duties include, but not limited to:

• Lead and implement all phases of the Risk Management Framework (RMF) Assessment & Authorization (A&A) lifecycle for classified information systems


• Implement, assess, and monitor security controls to safeguard classified networks and information


• Perform vulnerability management activities including vulnerability assessments, Security Technical Implementation Guide (STIG) evaluations, and ACAS scans


• Perform Security Impact Assessments (SIA) and vulnerability analysis as part of Configuration Management (CM)


• Support and participate in incident response activities, including investigation, reporting, and mitigation actions


• Provide configuration management for all security-relevant hardware, software, and firmware; validate that system changes comply with security policies


• Prepare, review, and maintain all security documentation including SSPs, Risk Assessment Reports, POA&Ms, hardware/software baselines, and complete Authorization to Operate (ATO) packages


• Ensure documentation is current, accurate, and accessible to authorized personnel


• Develop and provide security awareness training for personnel with access to classified systems


• Serve as a primary cybersecurity liaison with government customers, suppliers, and internal stakeholders


• Support audits, inspections, investigations, and compliance-driven cybersecurity requirements


• Oversee system and network designs involving diverse computing environments with multiple classification levels


• Perform other cybersecurity duties as assigned by the ISSM


• Interface with government approving authorities across the DoD in an information-security role

Qualifications

Citizenship: U.S. Citizenship Required

Clearance: Active Secret required; must be able to obtain and maintain TS/SCI and SAP access

Education: Bachelor's degree in a technical field and at least 3 years relevant technical experience (experience may substitute for education).

Years of Experience: 3–10 years relevant technical/cybersecurity experience

Certifications: CompTIA Security plus (Security+) or CompTIA SecurityX (SecurityX - formerly known as CASP+) or CompTIA Cloud+ (Cloud+) or Certified Cloud Security Professional (CCSP) Systems Security Certified Practitioner (SSCP) or GIAC Security Essentials Certification (GSEC), Certified Information Systems Security Officer (CISSO) or Certified in Governance, Risk and Compliance (CGRC/CAP) or GIAC Cyber Security Analyst (GCSA) or Certified Information Systems Security Officer (CISSO) or Certified Chief Information Security Officer (CCISO)

• Experience with RMF, NIST 800-53, JSIG, and A&A documentation


• Experience performing system vulnerability assessments, SIAs, and configuration management


• Experience generating formal cybersecurity documentation and reports

Preferred Qualifications

Clearance: TS/SCI

Certifications: Certified Information Security Manager (CISM) or Federal IT Security Professional-Manager (FITSP-M) or GIAC Certified Intrusion Analyst (GCIA) or GIAC Certified Incident Handler (GCIH) or GIAC Security Leadership Certification (GSLC) or GIAC Global Industrial Cyber Security Professional (GICSP)

Certified Information Systems Security Professional - Information Systems Security Management Professional (CISSP-ISSMP) or Certified Information Systems Security Professional (CISSP)

• Experience with SCC/Evaluate STIG and ACAS


• Experience with Windows/Linux, virtual systems, network devices, databases, and web apps


• Experience with AF software/application certification processes


• Experience conducting cybersecurity audits using reduction tools

Technical Skills

• Strong understanding of SAP cybersecurity and secure system operations in on-prem and cloud-based environments


• Understanding of RMF lifecycle for DoW systems in SAP environments


• Experience with NIST 800-53 controls and JSIG requirements


• Experience designing, developing, or managing IT/cyber systems and integrating emerging technologies


• Experience leading IT activities ensuring compliance with legal, regulatory, and DoD/AF requirements


• Strong project management and documentation skills


• Experience with STIG evaluations, ACAS scans, SIA assessments, and vulnerability analysis


• Experience with auditing, incident response, and investigative cybersecurity activities


• Experience assessing Windows, Linux, virtual systems, network devices, and web applications


• Experience with ATO documentation including SSPs, RARs, POA&Ms, and hardware/software baselines


• Preferred: Experience with SCC/Evaluate STIG, ManageEngine EventLog Analyzer, and Air Force software certification assessments

Interpersonal Skills

• Strong oral and written communication skills


• Ability to negotiate complex issues and maintain effective working relationships


• Ability to lead studies, projects, and system-level cybersecurity initiatives


• Ability to collaborate with diverse engineering, operations, and program stakeholders


• Ability to work independently with high initiative and minimal supervision

Additional Information

Location: Eglin AFB, FL

Work Environment: Onsite

Job Status: Full-Time

Travel: 10% CONUS/OCONUS TDYs

Company Overview

Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care. Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.

Please note: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.