Information Systems Security Officer; ISSO

Position: Information Systems Security Officer (ISSO) (27.1)*
SierTeK proudly serves our clients by providing expertise in the Program Management, Information Technology, and Administrative Support domains. Founded in 2007 as a minority and service-disabled veteran-owned company, we serve as prime- and subcontractor for a multitude of Federal Department of Defense contracts. By focusing on continual improvement, our services remain at the forefront of our industry, and we pride ourselves on delivering our services with the highest degree of integrity.

SierTeK Ltd. is seeking two (2) Information System Security Officers to support an opportunity at JBSA-Fort Sam Houston.

Position Overview Section Sier Te K is seeking an experienced Information System Security Officer (ISSO) to provide cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems supporting Air Force Research Laboratory (AFRL) operations.

The ISSO will support cybersecurity activities across a distributed AFRL organization, with a primary focus on Risk Management Framework (RMF) compliance, Authorization to Operate (ATO) management, cybersecurity assessments, vulnerability management, eMASS administration, security documentation, access management, and DoD cybersecurity workforce requirements.

The ideal candidate will have a strong understanding of DoD cybersecurity policies and RMF processes, excellent communication and organizational skills, and the ability to work independently while providing cybersecurity guidance and support to technical personnel, leadership, and organizational stakeholders.

Essential Job Functions Provide Information Systems Security Officer (ISSO) cybersecurity support in accordance with DoD 8140 Cyberwarfare Code 721 requirements.

Provide cybersecurity support for NIPRNet, DREN, RDTE, SIPRNet, and standalone enclaves and systems.

Serve as a cybersecurity consultant and advisor to unit technicians and organizational personnel.

Administer, coordinate, and track compliance with TSRL enterprise cybersecurity architecture, strategy, plans, policies, and supplemental guidance across the distributed AFRL organization.

Ensure Risk Management Framework (RMF) requirements are satisfied and that applicable Authority to Operate (ATO) authorizations are obtained and maintained.

Maintain current and accurate cybersecurity documentation, records, and supporting artifacts.

Support configuration management reviews and maintenance to ensure appropriate security mechanisms are implemented.

Maintain AFRL IT portfolio and cybersecurity information within Information Technology Investment Portfolio System (ITIPS), AFRL RMF Workflow, and Enterprise Mission Assurance Support Service (eMASS).Administer and track applicable systems and enclaves within eMASS and ensure ATO packages remain current.

Maintain compliance with applicable cybersecurity standards and directives, including NIST SP 800-53 Revision 5, CNSSI 1253 Revision 4, DoDI 8510.01, and other applicable RMF requirements.

Advise senior management and the Authorizing Official regarding cybersecurity risks, security posture, vulnerabilities, and changes affecting the organization's cybersecurity environment.

Assess threats and vulnerabilities affecting computer systems and enclaves and develop appropriate security risk profiles.

Conduct technical and non-technical risk and vulnerability assessments and identify, document, and support mitigation of cybersecurity vulnerabilities.

Collect and maintain cybersecurity data required for system and enclave reporting.

Maintain digital eMASS system package repositories on authorized information systems.

Develop, maintain, and distribute cybersecurity plans, instructions, and Standard Operating Procedures (SOPs), including:

System Security Plans (SSPs)
Security Assessment Reports (SARs)
Plans of Action and Milestones (POA&Ms)
Risk assessment reports

Body of Evidence documentation

Network topology diagrams

Hardware inventories

Software inventories

Ensure remediation plans and POA&Ms are established for vulnerabilities identified through assessments, audits, and inspections.

Maintain ATO/eMASS artifacts and ensure required documentation is updated within established timelines.

Maintain system hardening checklists and Security Technical Implementation Guides (STIGs) and coordinate remediation actions for cybersecurity findings.

Support cybersecurity inspections and audits conducted by internal and external Government organizations.

Coordinate with the TSRL IT lead to implement, assess, manage, and monitor eMASS…