HPE Information System Security Officer

Position Title:

HPE Information System Security Officer

Hill AFB, Utah (on-site)

Active Secret Clearance Required

$ - $

Command Cyber Solutions is looking for an HPE Green Lake Information System Security Officer (ISSO) to support Hill Component Enterprise Data Center (CEDC) IT Operations and Maintenance Services located at Hill Air Force Base, Utah (HAFB). This position supports modernization of legacy United States Air Force network infrastructure and migration of services to an HPE Green Lake cloud environment. The ISSO leads cybersecurity planning, security architecture integration, Risk Management Framework (RMF) activities, and authorization support to maintain mission assurance throughout implementation and migration activities.

• Lead cybersecurity planning and security architecture integration for the HPE Green Lake implementation.
• Assess all hosted systems for RMF compliance, authorization to operate (ATO) status, security-control implementation, and cloud-migration readiness.
• Validate system categorization, impact levels, data classifications, and applicable regulatory requirements.
• Identify cybersecurity risks, vulnerabilities, and compliance gaps that could affect migration sequencing and operational readiness.
• Develop cybersecurity requirements for integration with Zero Trust architecture, identity and access management, logging, continuous monitoring, and security information and event management (SIEM) capabilities.
• Ensure migration strategies incorporate security-by-design principles and applicable Department of War and Department of the Air Force cybersecurity policies.
• Support development of security implementation roadmaps, risk-mitigation strategies, and authorization packages necessary for cloud operations.
• Advise Government personnel on cybersecurity implications of modernization decisions and provide recommendations to maintain mission assurance throughout implementation and migration activities.
• Perform cybersecurity analysis and develop system topologies, data-flow mappings, and security architecture documentation supporting HPE Green Lake migration planning and implementation.
• Perform and assist in vulnerability-management activities, including executing ACAS scans; evaluating scan results; prioritizing findings; mapping remediation actions to affected systems; and supporting reduction of the overall vulnerability posture.
• Evaluate Security Technical Implementation Guides (STIGs) and complete required STIG checklists.
• Manage systems through the complete process of achieving and maintaining ATO in a Department of War/Department of the Air Force environment.
• Perform and support security patching, configuration-compliance validation, and remediation tracking.
• Develop, manage, and update the program risk register in coordination with project management and Government stakeholders.
• Support continuous-monitoring activities, cybersecurity reporting, incident-response coordination, and audit readiness.
• Perform other duties as assigned based on customer requirements.

• Bachelor's Degree in Business, Information Technology, Cybersecurity, or a related field with five (5) or more years of experience in information security, RMF, vulnerability management, cloud security, or a related field. A Master's Degree and two (2) or more years of relevant experience may be substituted.

• Security+ CE or IAM/IAT I equivalent.
• Active Secret clearance.

• Must have relevant Department of the Air Force RMF experience.
• RMF assessment and authorization activities, including development and maintenance of authorization-package…