Mission Analyst ISSO-Red Flag

Milsup LLC; Nellis Air Force Base Census-Designated Place (NV); On-site; USD 90,000 - 130,000; Full time

Job summary

Milsup LLC in the United States is seeking an Information System Security Officer (ISSO) with training and experience to maintain the protective security posture of classified information systems on base. The role involves SCIF/SAP security management, COMSEC coordination, and monitoring security operations across the assigned systems.

Candidates should have a TS/SCI clearance, familiarity with ACC SSO/HQ directives, and the ability to support RF exercises and security planning for

Qualifications

• Highly developed organizational, planning and management writing skills.
• Strong oral communication and writing abilities.
• Project management skills and ability to schedule workflow.
• Ability to prioritize, delegate, meet deadlines, and multi-task.

Responsibilities

• Knowledge of data backup, recovery, system functions, security policies and safeguards.
• Knowledge of intrusion detection methodologies for host and network-based intrusions.
• Develop and maintain a formal IS security program and policies for assigned area.
• Assist in administration of STO, SAP/SCI information security programs.
• Knowledge of COMSEC policies and procedures and related security actions.
• Support RF exercises planning and briefings.

Skills

Organizational skills

Oral communication

Project management

Multi-tasking

Education

Bachelor's Degree desired

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Outlook

Job description

Training And Experience

ISSO's shall be responsible for ensuring the appropriate operational security posture is maintained for information systems and assist as a SCIF/ SAP security manager IAW their respective requirements. ISSOs will require access to COMSEC information at on-base locations. ISSOs will not require their own COMSEC account but may be the COMSEC Custodians. Access will be coordinated with the sponsoring agency. Access to COMSEC can be controlled by ISSOs IAW their computer security duties. ISSOs will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer. IAW directives from ACC SSO and HQ ACC A5/8ZX, ISSOs may manage the security aspects of information systems as interim 57 WG A5Z ISSMs/ SSO ISSM and shall be responsible for the day-to-day security operations of applicable systems. Responsibilities also include physical and environmental protection, personnel security, incident handling, security training and awareness. The ISSOs in coordination with other information systems personnel will have an active role in monitoring a system and its environment of operation to include developing, updating, managing and controlling changes to the system, and assessing the security impact of those changes. ISSOs will support information system security in both co-use SCIF/SAPFs IAW ACC SSO and HQ ACC A5/8ZX directives and policies as they apply to their respective information systems and spaces. ISSOs will support classified warfare planning, briefings and debriefings for RF exercises. Minimum three (3) years' experience in listed field conducting security management support to TS/SCI, STO and SAP/SAR level programs supporting joint and multinational exercises. Taskings may support joint, cyber, and space planning and logistical support of RF exercises.

Minimum Qualifications

Education

Bachelor's Degree desired.

Training And Experience

ISSO's shall be responsible for ensuring the appropriate operational security posture is maintained for information systems and assist as a SCIF/ SAP security manager IAW their respective requirements. ISSOs will require access to COMSEC information at on-base locations. ISSOs will not require their own COMSEC account but may be the COMSEC Custodians. Access will be coordinated with the sponsoring agency. Access to COMSEC can be controlled by ISSOs IAW their computer security duties. ISSOs will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer. IAW directives from ACC SSO and HQ ACC A5/8ZX, ISSOs may manage the security aspects of information systems as interim 57 WG A5Z ISSMs/ SSO ISSM and shall be responsible for the day-to-day security operations of applicable systems. Responsibilities also include physical and environmental protection, personnel security, incident handling, security training and awareness. The ISSOs in coordination with other information systems personnel will have an active role in monitoring a system and its environment of operation to include developing, updating, managing and controlling changes to the system, and assessing the security impact of those changes. ISSOs will support information system security in both co-use SCIF/SAPFs IAW ACC SSO and HQ ACC A5/8ZX directives and policies as they apply to their respective information systems and spaces. ISSOs will support classified warfare planning, briefings and debriefings for RF exercises. Minimum three (3) years' experience in listed field conducting security management support to TS/SCI, STO and SAP/SAR level programs supporting joint and multinational exercises. Taskings may support joint, cyber, and space planning and logistical support of RF exercises.

General Skills

Must possess highly developed organizational, planning and management writing skills, oral communication skills, project management skills, ability to schedule workflow, prioritize, delegate, meet deadlines, and be multi-task oriented.

Computer Skills

Proficient in Microsoft Word, Excel, PowerPoint and Outlook.

Security Clearance

Must possess and maintain a Top Secret clearance with the ability to obtain a TS/SCI, STO, SAP clearance

Duties And Responsibilities

• Knowledge of data backup, recovery, system functions, security policies, technical security safeguards, and operational security measures.
• Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of the controls related to the use, processing, storage, and transmission of data.
• Knowledge of TACLANE operation and configuration.
• Knowledge of the organization's enterprise information technology (IT) goals and objectives to develop and maintain a formal IS security program and policies for the assigned area of responsibility.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) to develop and oversee operational information systems security implementation policy and guidelines.
• Knowledge of implementing multiple classified networks and security architecture to include (JWICS and CV2 networks). As well as understanding and their respective topologies, protocols, components, and principles to develop and oversee information systems security IAW implementation policy and guidelines.
• Knowledge of measures or indicators of system performance and availability.
• Knowledge of laws,

Knowledge of network traffic analysis methods.

• Knowledge of access control management to include information security of access badge systems
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of server and client operating systems.
• Skill in creating policies that reflect system security objectives.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Knowledge of current and emerging threats/threat vectors.
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.
• Knowledge of physical, personnel, industrial, and information security.
• Knowledge of information security to include providing direct support and assistance in day-to-day administration of the overall STO, SAP/SCI information security program.
• Knowledge of information security management, to ensure compliance of foreign national information systems are IAW DoD/ DAF policy, or Joint Special Access Program Implementation Guide requirements in direct support of STO, SAP/SCI events.
• Knowledge of STO, SAP/SCI Information Systems Security and STO, SAP/SCI and Collateral Cybersecurity measures.
• Knowledge of STO, SAP/SCI Personnel Security to manage direct support of day-to-day administration as well requirements supporting exercises and events.
• Knowledge of IJSTO CJCSI policies, CAB Management Plans, and STO requirements to manage STO operations as a STO/CAB ISSO.
• Knowledge of COMSEC policies and procedures, COMSEC OI and Emergency Action Plans/task.
• Worked in Specialty Codes/Areas: 0080 or one year experience in classified vault management.

SUPERVISORY/MANAGEMENT RESPONSIBLITY

None

Note

In filling a vacant position, preferred or required credentials regarding education, training, experience, skills, and other bona fide occupational qualifications may be established. The credentials shown in this job description may be interpreted only as the minimum criteria existing at the time the description was developed. Other bona fide occupational qualifications and criteria may be utilized as needed in the selection process.

The duties listed above are intended only as illustrations of the various types of work that may be performed. The omission of specific statements of duties does not exclude them from the position if the work is similar, related, or a logical assignment to the position.

The job description does not constitute an employment agreement between the employer and employee and is subject to change by the employer as the needs of the employer and requirement of the job change.

The order of duties and responsibilities listed in this job description is not designed or intended to rank the duties and responsibilities in any order of importance relative to each other.