Mission Analyst ISSO-Red Flag

Milsup LLC; Las Vegas (NV); On-site; USD 120,000 - 180,000; Full time

Job summary

Milsup LLC seeks an ISSO to manage day-to-day security operations for TS/SCI, STO and SAP/SAR programs. Responsibilities include safeguarding COMSEC, monitoring systems, and enforcing DoD/DAF policies. Strong communication, planning and documentation skills are required.

Qualifications include a Bachelor's degree and a Top Secret clearance with ability to obtain TS/SCI/SAP. Experience across co-use SCIF/SAPFs and RF exercise support is desired. On-base site work in Las Vegas, NV is expected.

Qualifications

• Bachelor's Degree desired.
• Strong organizational, planning and writing skills.
• Excellent oral communication and project management abilities.
• Ability to schedule workflow, prioritize, delegate and meet deadlines.

Responsibilities

• Knowledge of data backup, recovery, system functions and security policies.
• Knowledge of information security continuous monitoring and intrusion detection.
• Knowledge of controls for data handling and TACLANE operation.
• Develop and maintain formal IS security program and policies.
• Oversee security implementation across JWICS and CV2 networks.
• Ensure compliance with DoD/DAF policies and STO/SAP/SCI requirements.
• Support STO, SAP/SCI information security day-to-day administration.

Skills

Organizational skills

Planning skills

Management writing

Oral communication

Project management

Prioritization

Deadline-oriented

Multitasking

Education

Bachelor's degree

Tools

Microsoft Word

Excel

PowerPoint

Outlook

Job description

MINIMUM QUALIFICATIONS

Education: Bachelor's Degree desired.

Training and Experience: ISSOs' shall be responsible for ensuring the appropriate operational security posture is maintained for information systems and assist as a SCIF/ SAP security manager IAW their respective requirements. ISSOs will require access to COMSEC information at on-base locations. ISSOs will not require their own COMSEC account but may be the COMSEC Custodians. Access will be coordinated with the sponsoring agency. Access to COMSEC can be controlled by ISSOs IAW their computer security duties. ISSOs will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer. IAW directives from ACC SSO and HQ ACC A5/8ZX, ISSOs may manage the security aspects of information systems as interim 57 WG A5Z ISSMs/ SSO ISSM and shall be responsible for the day-to-day security operations of applicable systems. Responsibilities also include physical and environmental protection, personnel security, incident handling, security training and awareness. The ISSOs in coordination with other information systems personnel will have an active role in monitoring a system and its environment of operation to include developing, updating, managing and controlling changes to the system, and assessing the security impact of those changes. ISSOs will support information system security in both co-use SCIF/SAPFs IAW ACC SSO and HQ ACC A5/8ZX directives and policies as they apply to their respective information systems and spaces. ISSOs will support classified warfare planning, briefings and debriefings for RF exercises. Minimum three (3) years' experience in listed field conducting security management support to TS/SCI, STO and SAP/SAR level programs supporting joint and multinational exercises. Taskings may support joint, cyber, and space planning and logistical support of RF exercises.

General Skills: Must possess highly developed organizational, planning and management writing skills, oral communication skills, project management skills, ability to schedule workflow, prioritize, delegate, meet deadlines, and be multi-task oriented.

Computer Skills: Proficient in Microsoft Word, Excel, PowerPoint and Outlook.

Security Clearance: Must possess and maintain a Top Secret clearance with the ability to obtain a TS/SCI, STO, SAP clearance.

DUTIES AND RESPONSIBILITIES

• Knowledge of data backup, recovery, system functions, security policies, technical security safeguards, and operational security measures.
• Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of controls related to the use, processing, storage, and transmission of data.
• Knowledge of TACLANE operation and configuration.
• Knowledge of the organization's enterprise information technology (IT) goals and objectives to develop and maintain a formal IS security program and policies for the assigned area of responsibility.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) to develop and oversee operational information systems security implementation policy and guidelines.
• Knowledge of implementing multiple classified networks and security architecture to include (JWICS and CV2 networks). As well as understanding and their respective topologies, protocols, components, and principles to develop and oversee information systems security IAW implementation policy and guidelines.
• Knowledge of measures or indicators of system performance and availability.
• Knowledge of laws,

Knowledge of network traffic analysis methods.

• Knowledge of access control management to include information security of access badge systems.
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of server and client operating systems.
• Skill in creating policies that reflect system security objectives.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Knowledge of current and emerging threats/threat vectors.
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.
• Knowledge of physical, personnel, industrial, and information security.
• Knowledge of information security to include providing direct support and assistance in day-to-day administration of the overall STO, SAP/SCI information security program.
• Knowledge of information security management, to ensure compliance of foreign national information systems are IAW DoD/ DAF policy, or Joint Special Access Program Implementation Guide requirements in direct support of STO, SAP/SCI events.
• Knowledge of STO, SAP/SCI Information Systems Security and STO, SAP/SCI and Collateral Cybersecurity measures.
• Knowledge of STO, SAP/SCI Personnel Security to manage direct support of day-to-day administration as well requirements supporting exercises and events.
• Knowledge of IJSTO CJCSI policies, CAB Management Plans, and STO requirements to manage STO operations as a STO/CAB ISSO.
• Knowledge of COMSEC policies and procedures, COMSEC OI and Emergency Action Plans/task.
• Worked in Specialty Codes/Areas: 0080 or one year experience in classified vault management.

SUPERVISORY/MANAGEMENT RESPONSIBLITY

None

NOTE:

In filling a vacant position, preferred or required credentials regarding education, training, experience, skills, and other bona fide occupational qualifications may be established. The credentials shown in this job description may be interpreted only as the minimum criteria existing at the time the description was developed. Other bona fide occupational qualifications and criteria may be utilized as needed in the selection process.

The duties listed above are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position.

The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirement of the job change.

The order of duties and responsibilities listed in this job description is not designed or intended to rank the duties and responsibilities in any order of importance relative to each other.