Information Systems Security Officer

Responsibilities

• Supports the Cybersecurity functional line for the Hill CEDC IT Operations & Maintenance contract at Hill AFB
• Ensures the security, compliance, and operational integrity of information systems supporting mission-critical operations
• Responsible for implementing and maintaining cybersecurity controls, supporting Risk Management Framework (RMF) activities, monitoring system security posture
• Manages vulnerabilities and ensures compliance
• Manages the full RMF lifecycle including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring
• Maintains ACAS, HBSS, and SCAP compliance posture
• Monitors information systems for compliance with applicable cybersecurity policies, standards, and regulations
• Conducts vulnerability assessments and coordinates remediation efforts with system owners and technical teams
• Reviews security configurations, system changes, and architecture modifications to ensure compliance with approved security baselines
• Supports security authorization activities, continuous monitoring programs, and cybersecurity inspections
• Analyzes security alerts, findings, and incidents and coordinates corrective actions as required
• Assists with implementation and validation of Security Technical Implementation Guides (STIGs) and other security requirements
• Maintains Plan of Action and Milestones (POA&M) documentation and tracks remediation efforts through completion
• Supports audit readiness activities by maintaining cybersecurity documentation, evidence, and traceability records

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Information Assurance, or related field
• 5+ years of experience supporting information assurance, cybersecurity, or information systems security activities
• Experience supporting DoD Risk Management Framework (RMF) processes and security authorization activities
• Knowledge of NIST cybersecurity frameworks, controls, and federal information security requirements
• Experience conducting vulnerability management, security compliance assessments, and remediation tracking
• Familiarity with Security Technical Implementation Guides (STIGs), vulnerability scanning tools, and security compliance reporting
• Understanding of enterprise IT operations, including systems, networks, storage, virtualization, and cloud technologies
• Experience supporting Configuration and Change Management processes
• Strong analytical, troubleshooting, and risk assessment skills
• Excellent written and verbal communication skills with the ability to prepare security documentation and reports
• Familiarity with Agile methodologies