Share Email Opening Title Information Systems Security Management (ISSM) – Junior  Category Security   Description The Information Systems Security Management (ISSM) – Junior shall be responsible for assembling, submitting, maintaining, and decommissioning all TEMPEST (also known as Emissions Security, or EMSEC) certification packages for the Air Force Research Laboratory’s Sensors Directorate (AFRL/RY). Additional responsibilities may include, but are not limited to: Perform reviews of all Classified Processing Areas (CPAs) for the Directorate. Ensure countermeasures are being observed in all visited areas. Inform Program Managers, RY Cybersecurity, and CPA Points of Contact of any violations of TEMPEST requirements and recommend solutions for compliance. Provide updates to the Air Base TEMPEST Manager. Resolve all TEMPEST issues such as requests for diagrams, equipment lists, and sample documentation. Answer TEMPEST-related questions for new and upcoming projects. Contain and mitigate Negligent Disclosures of Classified Information (NDCI), including Classified Messaging Incidents (CMI); perform risk analysis, security tests, and identification of contaminated systems; ensure all connections, information systems, and storage devices are reported to appropriate personnel as defined in the various DoD/AF/local instructions and regulations, and sanitize systems as required. Assist with Risk Management of all Research, Development, Test, & Evaluation (RDT&E) and standalone computer information systems (IS) and flight tests for the Directorate, including system categorization; controls selection, implementation, and assessment; system authorization; and continuous monitoring throughout the life cycle of the IS; to include periodic reviews for security compliance or changes to the system baseline that would affect its Authorization To Operate (ATO). Assist with preparation, submission, and tracking of Risk Management Framework (RMF) Assessment and Authorization (A&A) packages for all Research, Development, Test, & Evaluation (RDT&E) and standalone computer information systems and flight tests; including developing, tracking, and reporting progress for Plans Of Action with Milestones (POA&Ms). Provide assistance in developing and maintaining System Security Plans. Prepare, submit, and track all Secure Internet Protocol Router Network (SIPRNet) Terminal Authorization packages; create SIPRNet Terminal Memorandums of Agreement and process to ensure addition to the base-wide package. Assist in the management of the Data Loss Prevention (DLP) waiver process, including creating and submitting waiver requests packages, processing, and evaluating requests, recommending alternatives, reviewing documents, filling out templates, routing all required forms and information, updating all waiver package attachments, performing periodic waiver revalidations, and conducting follow-ups with customers. Support the non-Government laptop approval process. Update the Directorate’s Remedy database as needed and work with the Remedy administrator to resolve any issues with the data or application. Register and maintain Federal Information Security Management Act (FISMA) reportable Information Systems in Enterprise Mission Assurance Support Service (eMASS) if required; assist Directorate Program Managers and POCs in obtaining access as needed. Support all computer security issues; provide information regarding policy for Research and Development (R&D) system removal from the facility; work spoofing issues, and handle phishing and spam-related tasks. Provide assistance in performing Cybersecurity Liaison duties and serve as the primary in his/her absence. Handle account management tasks such as processing all DD Forms 2875, System Authorization Access Requests, Account Creation Tickets, Information Assurance (IA) training issues, IA training alibis, disabled account issues, user agreements, out-processing of personnel, conversion issues, standard Common Access Card (CAC) issues, account expiration issues, elevated privileges, and machine adds. Work with and at the direction of the Directorate ISSM to ensure that the network architecture and computational environment is maintained in full compliance with applicable Air Force and DOD policies, procedures, and regulations. Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package. Ensure all users have the requisite security clearances, authorization, need-to-know, and are aware of their security responsibilities before granting access to the IS. Report all security-related incidents to the Directorate ISSM. Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly. Ensure all IS security-related documentation is current and accessible to properly authorized individuals. Ensure audit records are collected and reviewed. Maintain current knowledge of and comply with applicable OPSEC requirements, procedures, and policies to reduce program vulnerability from successful adversary collection and exploitation of critical information. Maintain current knowledge of Sensors Directorate Critical Information List and comply with all security training program requirements and any specialized security training as deemed applicable. Provide input and support for the development, administration, and execution of the internal information technology infrastructure to meet current and future program needs. Assist in formulating architectural design, functional specifications, interfaces and documentation for hardware, software, and systems/networks. Review, implement, and comply with all DISA, DoD and AF Cybersecurity Policies. Maintain security compliance of all classified information systems. Support all Special Access Program (SAP) controls and audits as needed. Responsibilities/duties of this individual may be shared between Divisions within the AFRL Sensors Directorate. Assist with proposal development, if necessary. Perform other duties, as assigned.   Position Requirements Experience: Three (3) years of applicable experience. Expertise in TEMPEST certification packages, from assembling them to maintaining them to decommissioning them. Experience in compliance with applicable security requirements, procedures, and policies for Classified Processing Areas (CPAs) to mitigate risk of adversarial data collection and exploitation of critical information. Experience with Negligent Disclosure of Classified Information (NDCI) policies and procedures. Education: High School Diploma Required. BA/BS or MA/MS Desired. Certificates, Licenses, Registrations: Security+ Certification (minimum) or other appropriate DoD 8570 security certification required; Certified Information Systems Security Professional (CISSP) certification preferred. Ability to acquire DoD Security Fundamentals Professional Certification (SFPC) within 6 months of employment date. Other Required Skills & Abilities: Must be able to effectively communicate with customer and fulfill all duties and responsibilities as listed in the contract. Must be proficient in Microsoft Office suite including, but not limited to: Word, PowerPoint, Excel, and Outlook. COVID-19 Vaccination Requirement: COVID-19 Vaccination Requirement. While the vaccine mandate for federal contractors and subcontractors is still being decided, we are continuing to collect vaccination record cards and accepting requests for legal accommodations (approval of a legal accommodation is not guaranteed). Although providing this documentation is not required at this time, we appreciate your cooperation in voluntarily providing this documentation to us should the Executive Order be upheld in the courts. Security Clearance: Top Secret security clearance required. US Citizenship: This position supports a U.S. Government Contract whose terms require Sawdey Solution Services to staff it only with U.S. Citizens.   Full-Time/Part-Time Full-Time   Requisition Category Active   Req Number SEC-23-00001   Location Wright-Patterson AFB, OH   About the Organization Here at Sawdey Solution Services, an ISO 9001-14001 certified and CMMI-SVC v2 Level 3 appraised corporate headquarters, we have built a nationwide and global footprint by providing innovative, cross-disciplined professional services, engineering, and cyber solutions to Department of Defense (DoD), Department of Homeland Security (DHS), Federal Agencies, and commercial customers. Operating successfully since 2001, we are a Woman Owned/Service Disabled Veteran Owned Business (WOSB/SDVOSB). Our mission is to provide employees with the best experience in a people focused, continuous process improvement environment. We are extremely proud of the culture we have created and encourage all prospective applicants to take a look at what other applicants and employees are saying about us: Indeed Reviews: Sawdey Indeed Reviews Glassdoor Reviews: Sawdey Glassdoor Reviews What We Offer: Whether you are a transitioning service member or are an experienced government contracting professional, Sawdey Solution Services offers a strong benefits package that extends beyond compensation. In addition to our healthcare plans, we also have benefits that encourage work/life balance, support your retirement goals, and aid in achieving not only your career goals, but your educational and training goals as well. Don't just take our word (and others' words) for it We invite you to come experience the Sawdey difference for yourself!   EOE Statement We are a Disabled-Veterans-41 CFR 60 1.4, Equal Opportunity Employer. Devoted to creating a diverse and friendly workplace, we do not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, gender identity, marital status, national origin, or veteran status. Our goals and beliefs are that diverse backgrounds and experiences empower and enable us to offer our customers an unmatched level of service. People of color, women, LGBTQIA+, veterans, and persons with disabilities are encouraged to apply!   Job Description None Specified  This position is currently not accepting applications. To search for an open position, please go to http://SawdeySolutionServices.appone.com WE ALSO RECOMMEND Other Jobs Within Same Category IT Facility Management and Visitor Control in Wright-Patterson AFB, OH Posted on: 2/27/2023 [Apply Now] Advanced Signal Process and Experimentation Laboratory (ASPEN) Logistics Specialist in Wright-Patterson AFB, OH Posted on: 2/14/2023 [Apply Now] Other Jobs Within 60 Miles LAN Engineer - Senior in Dayton, OH Posted on: 3/9/2023 [Apply Now] Advanced Signal Process and Experimentation Laboratory (ASPEN) Logistics Specialist in Wright-Patterson AFB, OH Posted on: 2/14/2023 [Apply Now] IT Facility Management and Visitor Control in Wright-Patterson AFB, OH Posted on: 2/27/2023 [Apply Now] Business Systems Analyst - Intermediate in Wright-Patterson AFB, OH Posted on: 2/7/2023 [Apply Now] Follow us See who works here:

 

Click here for technical assistance.