Information Systems Security Officer II

This position requires onsite work at Kirtland Airforce Base in NM and an active Top Secret/SCI Security Clearance. Candidates who do not hold this clearance are not eligible for hire.

We are seeking a highly skilled and detail-oriented Information Systems Security Officer to join our team in support of mission‑critical defense programs. You will play a key role in performing a wide range of functions to ensure the protection of government‑sensitive and classified information systems supporting the identification of cyber risks, understanding applicable policies, and developing a mitigation plan.

• Establish and enforce complex system‑wide security requirements for TS/SCI systems based on analysis of user needs, Intelligence Community (IC) directives, DoD policy, federal regulations, and mission constraints.
• Serve as the primary cybersecurity advisor for classified systems operating at the TS/SCI level, ensuring strict adherence to ICD 503, NIST RMF, CNSS policies, and agency‑specific guidance.
• Develop, maintain, and implement System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), POA&Ms, and authorization packages for SCI systems.
• Support Authorization to Operate (ATO) efforts for high‑impact classified systems, including mission‑critical and compartmented programs.
• Apply specialized security controls and compartmented handling procedures to command and control (C2) networks and other special‑purpose TS/SCI systems.
• Coordinate with program managers, system engineers, and network administrators to integrate security controls into classified system architectures and enclave designs.
• Conduct risk assessments and security impact analyses for cross‑domain solutions, data transfers, and system interconnections within SCI environments.
• Monitor security posture through vulnerability scanning, STIG compliance validation, audit log review, and continuous monitoring activities across classified enclaves.
• Support security inspections, compliance reviews, and assessments conducted by Authorizing Officials (AOs), Security Control Assessors (SCAs), and IC oversight entities.
• Ensure proper implementation of access controls, privileged account management, and need‑to‑know enforcement within SCI compartments.
• Provide guidance on handling, storage, transmission, and destruction of classified information in accordance with TS/SCI handling requirements.
• Advise senior leadership and mission stakeholders on risk acceptance decisions, threat impacts, and mitigation strategies affecting national security systems.
• Maintain situational awareness of emerging cyber threats targeting classified networks and recommend defensive measures aligned with mission priorities.
• Collaborate with counterintelligence, physical security, and COMSEC personnel to ensure integrated protection of TS/SCI information systems.

• Active TS/SCI clearance.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related field (or equivalent combination of education and experience).
• 5–10+ years of progressive experience in information assurance, cybersecurity, or ISSO roles supporting classified or national security systems.
• Demonstrated experience establishing and implementing complex, system‑wide information security requirements based on analysis of user needs, federal policies, regulatory mandates, and operational resource constraints.
• In‑depth knowledge of Risk Management Framework (RMF) processes in accordance with NIST SP 800‑37, NIST 800‑53, CNSS, and ICD 503 requirements.
• Experience developing and maintaining security authorization artifacts, including System Security Plans (SSPs), POA&Ms, Security Control Assessments (SCAs), and continuous monitoring documentation for high‑impact systems.
• Proven ability to support senior leaders and mission stakeholders in the development and implementation of cybersecurity doctrine, policy, and governance frameworks.
• Expertise securing government and commercial common user systems, including enterprise networks, cloud environments, and shared services infrastructures.
• Experience applying specialized…