Information System Security Officer

Information System Security Officer
Information System Security Officer, Journeyman
Hill Air Force Base
Ogden, UT

HX5 is an award-winning provider of engineering, research and development, and technical services to clients such as NASA and the Department of Defense. Founded in 2004, HX5 is a fast-growing veteran- and woman-owned company with locations nationwide.

HX5 is currently seeking a qualified Information System Security Officer in support of the Aerospace Dominance Enabler Division at Hill Air Force Base in Ogden, UT.

Essential Duties and Responsibilities:

• Ensure all systems and applications meet DoD and Air Force cybersecurity requirements as directed by the Information System Security Manager (ISSM).

• Protect the confidentiality, integrity, and availability of systems, networks, and data by developing, implementing, and maintaining cybersecurity programs, policies, procedures, and security tools.

• Support all Risk Management Framework (RMF) authorization and accreditation activities, including configuration, artifact creation, documentation, and compliance reviews.

• Assist the ISSM in performing risk and vulnerability assessments on planned and operational information systems, identifying security gaps and recommending mitigation actions.

• Conduct security evaluations, audits, and reviews; support development of system contingency and disaster recovery plans; and promote user compliance with cybersecurity policies and training requirements.

• Participate in system and network design efforts to ensure appropriate security controls and RMF activities are incorporated from the start.

• Assist in the collection, analysis, and preservation of digital evidence related to cybersecurity incidents or policy violations.

• Maintain the operational security posture of assigned IT systems, monitor situational awareness, and implement actions to improve or restore cybersecurity resilience.

• Enforce Air Force cybersecurity policies, procedures, configuration guidelines (e.g., STIGs/SRGs), and change management processes.

• Maintain and audit authorized user access documentation and ensure users meet clearance, need‑to‑know, and annual training requirements.

• Report security incidents or vulnerabilities to the ISSM and support implementation of corrective or protective measures.

• Initiate and track exceptions, deviations, or waivers to cybersecurity requirements as needed.

Education and Experience:

Must have one of the following combinations of education and experience:

• Master’s degree or Bachelor's degree and three (3) years of directly related experience, three (3) of which must be in the DoD.

• OR seven (7) years of directly related experience, five (5) of which must be in the DoD.

• DoD 8570 compliant IAT II certification, and includes certifications such as:
  CompTIA Security+, CompTIA Cloud+, Security Leadership Certification (GSLC) is required.

Preferred Qualifications:

• Certifications:
  
  CISSP, or equivalent certification

• Must maintain required cybersecurity certifications in accordance with AFMAN 17‑1303.

• Technical Skills

• Experience supporting Risk Management Framework (RMF) activities and cybersecurity compliance

• Experience using eMASS for authorization packages, artifact management, and accreditation support

• Vulnerability assessment and risk mitigation analysis

• STIG/SRG implementation and configuration management

• Security audits, assessments, and incident response support

• Information system security and operational security posture management

• Secure system and network design support in DoD environments

• Interpersonal
  
  Skills:

• Ability to develop innovative approaches to complex test problems

• Strong attention to quality, adequacy, and completeness of test results and conclusions

• Ability to deliver thorough, timely, and efficient task…