Journeyman Information System Security Officer with Security Clearance

Astrion; Utah; On-site; USD 90,000 - 130,000; Full time

Job summary

Astrion seeks a Journeyman Information System Security Officer (ISSO) at Hill AFB, Utah, to support the AFLCMC/C3BM division in protecting, accrediting, and maintaining the security posture of Air Force information systems.

You will work with the Information System Security Manager (ISSM) to ensure RMF alignment, implement policies, and uphold confidentiality, integrity, and availability of critical networks and data.

Qualifications

• Bachelor's or Master's degree in a related field is required or preferred.
• DoD experience—3+ years, of which 3 must be in DoD—is preferred.
• IAT Level II or CISSP or equivalent certification is preferred.

Responsibilities

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the ISSM.
• Develop, implement, and maintain cybersecurity programs, policies, procedures, and security tools.
• Support RMF authorization and accreditation activities, including configuration, artifact creation, documentation, and reviews.
• Assist the ISSM in risk and vulnerability assessments, identify security gaps, and recommend mitigations.
• Conduct security evaluations, audits, and reviews; support contingency and disaster recovery planning; promote training compliance.
• Participate in system and network design to ensure security controls from the start.

Skills

RMF compliance

eMASS

Vulnerability assessment

STIG/SRG implementation

Incident response

DoD cybersecurity

System security posture

Education

Bachelor's or Master's Degree in related field

DoD experience (3+ years)

Security certifications (IAT Level II or CISSP)

Tools

eMASS

STIG/SRG tooling

Job description

Overview JOURNEYMAN INFORMATION SYSTEM SECURITY OFFICER (ISSO) LOCATION : Hill AFB, Utah JOB STATUS: Full-time CLEARANCE : Secret TRAVEL: Limited, as needed Astrion has an exciting opportunity for a Journeyman Information System Security Officer (ISSO)located at the Hill AFB in Ogden Utah to support the Aerospace Dominance Enabler Division (AFLCMC/C3BM). This role supports the protection, accreditation, and ongoing security posture of Air Force information systems. In this role, you will work closely with the Information System Security Manager (ISSM) to ensure systems meet all DoD and Air Force cybersecurity requirements, align with the Risk Management Framework (RMF), and maintain the confidentiality, integrity, and availability of critical networks and data. You will conduct risk assessments, support accreditation activities, evaluate system security controls, and help enforce policies, configurations, and user access standards. Additional responsibilities include monitoring for vulnerabilities, assisting with incident response actions, maintaining compliance artifacts, and supporting secure system design efforts. This position requires strong attention to detail, a commitment to cybersecurity excellence, and the ability to collaborate across technical and leadership teams.

REQUIRED QUALIFICATIONS / SKILLS

• Must have and be able to maintain and active Secret clearance
• Must be a US citizen

PREFERRED QUALIFICATIONS / SKILLS

• Education: Bachelor's or Master's Degree in a related field and at least 3 years of experience discipline being performed, 3 of which must be in the DoD, OR 7 years of directly related experience, 5 of which must be in the DoD. Certifications: IAT Level II (Security+, GSEC, CCNA-Security, Certified Systems Security Professional (CISSP), or equivalent certification)
• Must maintain required cybersecurity certifications in accordance with AFMAN 17‑1303.

Technical Skills

• Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance
• Experience using eMASS for authorization packages, artifact management, and accreditation support
• Vulnerability assessment and risk mitigation analysis
• STIG/SRG implementation and configuration management
• Security audits, assessments, and incident response support
• Information system security and operational security posture management
• Secure system and network design support in DoD environments

Interpersonal Skills:

• Ability to develop innovative approaches to complex test problems
• Strong attention to quality, adequacy, and completeness of test results and conclusions
• Ability to deliver thorough, timely, and efficient task execution
• Ability to provide clear analysis and recommendations to program test leadership

RESPONSIBILITES Duties may include, but are not limited to:

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).
• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.
• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.
• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.
• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.
• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.
• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.
• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.
• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.
• Maintain and audit authorized user access documentation and ensure users meet clearance, need‑to‑know, and annual training requirements.
• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.
• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.
• #CJ "Hanscom Campaign"