Information Systems Security Officer

About Pratt Miller, An Oshkosh Company

Pratt Miller is a product development company in motorsports, defense, and mobility industries providing clients with product engineering and low‑volume production solutions. Our range of research & development, engineering, prototype manufacturing, test & validation, and low‑rate production capability help our customers bring their high‑quality products to market faster.

The Information Systems Security Officer (ISSO) is responsible for ensuring the appropriate operational security posture is maintained for an information system and works in close collaboration with the ISSM. The role requires detailed knowledge and expertise in managing the environment for information systems, day‑to‑day security and monitoring for uptime and critical errors. Responsibilities include physical and environmental protection, incident handling, and system support.

The ISSO will coordinate with the ISSM and ISO to monitor the information system(s) and its environment, develop and update authorization documentation, implement configuration management across authorization boundaries, and assess the security impact of changes.

Day‑to‑day support is provided for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities, as well as for information technology special projects and dedicated systems such as hypervisor, application, network, and general troubleshooting.

Location:

On‑site, New Hudson, MI.

• Provide day‑to‑day operational support and troubleshooting for the application and infrastructure environment through system upgrades and performance management.
• Support a VDI environment (Citrix, VMware/Nutanix), including deploying new hardware, maintaining overall health, and supporting virtual workstations and servers.
• Ensure appropriate operational security posture for an information system.
• Assist the ISSM in meeting duties and responsibilities.
• Prepare, review, and update authorization packages; notify ISSM of changes that might affect authorization determinations.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate incident response activities with ISSM and Cybersecurity teams.
• Maintain current and accessible information‑security documentation for authorized individuals.
• Identify cybersecurity vulnerabilities and assist with patch implementation or mitigation.
• Coordinate hardware, software, or firmware changes with the ISSM and AO/DAO prior to modification.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functional.
• Configure, certify, and audit/ analyze Windows/Linux operating systems in peer‑to‑peer, LAN, and WAN environments.

• Strong documentation skills for configurations, compliance evidence, and SOPs.
• Foundational understanding of networks, operating systems, servers, security, and the application management lifecycle.
• Execution of job orchestration to enhance system performance.
• Clear communication of complex security concepts to both technical and non‑technical audiences.
• Collaborative and communicative, consistently effective working across disciplines.
• Implementation and maintenance of NIST 800‑53 and NIST 800‑171 controls in an environment.
• Experience with auditing within government or defense compliance contexts.
• Ability to run and understand security vulnerability reports and act on them.
• Experience with Windows workstations/servers, Linux operating systems, and hypervisors.

• Bachelor’s degree in computer science, information technology, cybersecurity, or a related field; advanced degree preferred.
• Must meet the requirements for obtaining a U.S. Government clearance; active Secret or higher clearance preferred.
• Completed the Security+ Certification or working toward obtaining it within the first 90 days of employment.
• Experience with RMF, NIST 800‑53, DFARS 252.204‑7012, CMMC Level 2, and NIST 800‑171 compliance in defense or government environments.
• 1–5 years’ experience within a defense contractor or equivalent environment…