Information Assurance II Information System Security Officer (ISSO)

Posted 4 Days Ago
Be an Early Applicant
Montgomery, AL, USA
In-Office
78K-82K Annually
Mid level
Information Technology • Consulting • Cybersecurity • Defense
The Role
Implements and enforces cybersecurity policies for classified and unclassified Air Force networks. Manages user access, security configurations, RMF compliance, configuration management, vulnerability response, incident reporting, security exceptions, audit-log reviews, removable-media controls, and data-loss-prevention exemptions. Coordinates security changes with government stakeholders and documents compliance evidence.
Summary Generated by Built In

About DLS Engineering


DLS is an engineering firm with 30 years of Federal Government contracting experience. Our small business efficiencies coupled with a commitment to excellence allow us to provide reliable solutions with integrity for our nation's most critical defense and national security priorities.

Position overview:

DLS Engineering is seeking an Information Assurance II Information System Security Officer (ISSO) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.


As part of AFINC, the mission of the 26th Network Operations Squadron (26 NOS) is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). In the execution of its mission, the 26 NOS maintains network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks.


A day in the life:

  • Implements and enforce all cybersecurity policies, procedures, and countermeasures.
  • Ensures all users have the requisite security clearances and need-to-know, complete annual cybersecurity training, and are aware of their responsibilities before being granted access to the system. Maintains all authorized user access control documentation.
  • Ensures software, hardware, and firmware complies with appropriate security configuration guidelines (e.g., security technical implementation guides /security requirement guides).
  • Ensures proper configuration management procedures are followed prior to implementation and contingent upon necessary approval.
  • Coordinate changes or modifications with the government. Initiates protective or corrective measures, in coordination with the government when a security incident or vulnerability is discovered.
  • Reports security incidents or vulnerabilities to the designated representatives. Initiates exceptions, deviations, or waivers to cybersecurity requirements, as required.
  • Participate in remanence security risk management processes.
  • Process data loss prevention exemptions and removable media whitelist requests.
  • Document the review of logs and audit trails at a minimum weekly, more frequently if required.
  • Conduct removable media audits must be conducted at least annually, and logs must clearly show two-person control activity for all actions.

When I read the below it sounds like me:

  • 3+ years of experience in utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, Audit Tools, ESS, eMASS. PPS.
  • Experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs.
  • Experience in assessing and documenting test or analysis data to show cybersecurity compliance.
  • Prior system administrator or network operator experience with devices supported in the contract.
  • IAM-I Certification: CASP+, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, Security+ (CE), SSCP
  • Must be certified in governance, risk, and compliance (CGRC)
  • Must be a US citizen
  • Must hold a current Top Secret clearance with SCI Access (TS/SCI) or an active Secret clearance.

Other information:

  • We offer a competitive salary and a 401k program with company match.
  • We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
  • We offer a generous paid time off package
  • If accommodation is needed with the application and / or the interview process for applicants with disabilities, please contact Human Resources at 757-494-5151.
  • DLS is an E-Verify company.
  • DLS is an equal employment opportunity employer. Qualified applicants will receive consideration without regard to age, race, religion, sex (pregnancy, sexual orientation, gender identity), national origin, or disability. We encourage all qualified applicants to apply. If you believe you have been discriminated against, please contact Barbara Ellison. You also have the right to file a charge of discrimination with the equal employment opportunity commission.
  • Must be able pass a government background check, which will be completed before employment.

Skills Required

  • At least 3 years of experience using security-relevant tools, systems, and applications supporting the Risk Management Framework, including NESSUS, ACAS, DISA STIGs, audit tools, ESS, eMASS, and PPS.
  • Experience as an Information System Security Officer or Information System Security Manager supporting classified programs.
  • Experience assessing and documenting test or analysis data to demonstrate cybersecurity compliance.
  • Prior system administrator or network operator experience with supported devices.
  • IAM-I certification, such as CASP+, CCISO, CCSP, CGRC/CAP, Cloud+, GSEC, Security+ CE, or SSCP.
  • Current certification in governance, risk, and compliance, specifically CGRC.
  • U.S. citizenship.
  • Current Top Secret clearance with SCI access or an active Secret clearance.
  • Ability to pass a government background check before employment.
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Virginia Beach, VA
45 Employees
Year Founded: 1995

What We Do

DLS Engineering is a woman-owned engineering and professional-services contractor supporting the U.S. Department of Defense, Department of Homeland Security, and intelligence community. It provides acquisition and program management, intelligence and security operations, cybersecurity and IT/network operations, lifecycle logistics, and C5ISR systems engineering and sustainment. The company emphasizes cleared expertise, mission continuity, risk reduction, and reliable support for complex national-security and infrastructure programs.

Similar Jobs

Sprout Social Logo Sprout Social

Account Executive

Marketing Tech • Social Media • Software • Analytics • Business Intelligence
Easy Apply
Remote or Hybrid
US
1400 Employees
182K-301K Annually

Golden Hippo Logo Golden Hippo

Visual Design Intern - Spring 2027

Digital Media • eCommerce • Information Technology • Marketing Tech • Retail • Social Media • Analytics
Remote or Hybrid
USA
291 Employees
18-20 Hourly

HiBob Logo HiBob

Marketing Manager

HR Tech • Information Technology • Professional Services • Sales • Software
Remote or Hybrid
US
1350 Employees

Sonar Logo Sonar

Technical Account Manager

Artificial Intelligence • Cloud • Security • Software
Easy Apply
Remote or Hybrid
USA
800 Employees

Similar Companies Hiring

Golden Pet Brands Thumbnail
Digital Media • eCommerce • Information Technology • Marketing Tech • Pet • Retail • Social Media
El Segundo, California
567 Employees
Outpost Space Thumbnail
Aerospace • Defense
Los Angeles, California
38 Employees
RapidScale Thumbnail
Cloud • Information Technology • Consulting
Raleigh, NC
600 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account