Mission Analyst ISSO-Red Flag

Education: Bachelor's Degree desired.

Training and

Experience:

ISSOs' shall be responsible for ensuring the appropriate operational security posture is maintained for information systems and assist as a SCIF/ SAP security manager IAW their respective requirements. ISSOs will require access to COMSEC information at on-base locations. ISSOs will not require their own COMSEC account but may be the COMSEC Custodians. Access will be coordinated with the sponsoring agency.

Access to COMSEC can be controlled by ISSOs IAW their computer security duties. ISSOs will protect COMSEC material IAW directives deemed necessary by the installation COMSEC officer. IAW directives from ACC SSO and HQ ACC A5/8ZX, ISSOs may manage the security aspects of information systems as interim 57 WG A5Z ISSMs/ SSO ISSM and shall be responsible for the day-to-day security operations of applicable systems.

Responsibilities also include physical and environmental protection, personnel security, incident handling, security training and awareness. The ISSOs in coordination with other information systems personnel will have an active role in monitoring a system and its environment of operation to include developing, updating, managing and controlling changes to the system, and assessing the security impact of those changes. ISSOs will support information system security in both co-use SCIF/SAPFs IAW ACC SSO and HQ ACC A5/8ZX directives and policies as they apply to their respective information systems and spaces.

ISSOs will support classified warfare planning, briefings and debriefings for RF exercises. Minimum three (3) years' experience in listed field conducting security management support to TS/SCI, STO and SAP/SAR level programs supporting joint and multinational exercises. Taskings may support joint, cyber, and space planning and logistical support of RF exercises.

General

Skills:

Must possess highly developed organizational, planning and management writing skills, oral communication skills, project management skills, ability to schedule workflow, prioritize, delegate, meet deadlines, and be multi-task oriented.

Computer

Skills:

Proficient in Microsoft Word, Excel, PowerPoint and Outlook.

Security Clearance: Must possess and maintain a Top Secret clearance with the ability to obtain a TS/SCI, STO, SAP clearance.

• Knowledge of data backup, recovery, system functions, security policies, technical security safeguards, and operational security measures.
• Knowledge of the information security continuous monitoring plan, intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of controls related to the use, processing, storage, and transmission of data.
• Knowledge of TACLANE operation and configuration.
• Knowledge of the organization's enterprise information technology (IT) goals and objectives to develop and maintain a formal IS security program and policies for the assigned area of responsibility.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth) to develop and oversee operational information systems security implementation policy and guidelines.
• Knowledge of implementing multiple classified networks and security architecture to include (JWICS and CV2 networks). As well as understanding and their respective topologies, protocols, components, and principles to develop and oversee information systems security IAW implementation policy and guidelines.
• Knowledge of measures or indicators of system performance and availability.
• Knowledge of laws,

Knowledge of network traffic analysis methods.

• Knowledge of access control management to include information security of access badge systems.
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of server and client operating systems.
• Skill in creating policies that reflect system security objectives.
• Knowledge of new and emerging information technology (IT) and cybersecurity technologies.
• Knowledge of current and emerging threats/threat vectors.
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.
• Knowledge of…