24-002 – Information Systems Security Officer (ISSO) II

Position Overview

Sandy Mac Evolution LLC is seeking an Information Systems Security Officer (ISSO) II to support Department of Defense Special Access Program environments at Kirtland AFB, New Mexico.

The ISSO II is responsible for maintaining the appropriate operational security posture of assigned information systems and supporting the day-to-day cybersecurity activities required within Collateral, Sensitive Compartmented Information (SCI), and Special Access Program (SAP) environments.

The selected candidate will work closely with the Information Systems Security Manager and other cybersecurity personnel to develop and maintain system authorization documentation, implement configuration management controls, assess security impacts associated with system changes, and ensure compliance with applicable Risk Management Framework and SAP cybersecurity requirements.

Key Responsibilities

• Assist the ISSM in meeting assigned duties and responsibilities.
• Prepare, review, and update authorization packages and supporting bodies of evidence.
• Ensure approved procedures are established for clearing, sanitizing, and destroying hardware and media.
• Notify the ISSM when changes occur that could affect an information system authorization determination.
• Conduct periodic reviews of information systems to ensure continued compliance with approved authorization packages.
• Coordinate proposed hardware, software, and firmware changes with the ISSM and AO/DAO before implementation.
• Conduct security impact analyses for configuration management changes affecting authorization boundaries.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning.
• Ensure information system security documentation remains current and accessible to appropriately authorized personnel.
• Ensure audit records are collected, reviewed, and documented, including identified anomalies.
• Participate in required technical and security training associated with assigned duties.
• Execute cybersecurity portions of organizational self-inspections.
• Provide security coordination and review of system assessment plans.
• Identify cybersecurity vulnerabilities and assist with implementation of appropriate countermeasures.
• Prepare reports regarding the status of security safeguards applied to information systems.
• Perform ISSO duties in support of internal and external customers.

Required Qualifications

• 2–5 years of related experience.
• Experience developing RMF packages, authorization packages, or cybersecurity bodies of evidence.
• Prior performance in roles such as System Administrator, Network Administrator, or ISSO.
• SAP experience required.
• Working knowledge of Risk Management Framework processes and information systems security requirements.
• Experience supporting system authorization, configuration management, vulnerability identification, security assessments, and continuous monitoring.
• Ability to work effectively with ISSMs, system administrators, cybersecurity personnel, and government stakeholders.
• Must be able to regularly lift up to 50 pounds.

Education

• Bachelor’s degree or equivalent related experience.
• A Bachelor’s degree may be considered equivalent to four years of experience.
• An Associate’s degree in a related field may be considered equivalent to two years of experience.

Certification / Training Requirements

• DoD 8570.01-M IAM Level II qualification required in lieu of IAT Level II.
• Must satisfy applicable cybersecurity certification requirements associated with the labor category.

Security Clearance Requirements

• Active Top Secret clearance required.
• Must possess or be eligible for SCI access.
• Must be eligible for access to Special Access Program information.
• Must be willing to submit to a Counterintelligence Polygraph.