Senior Cybersecurity, ISSM

This is a fully remote position, open to applicants in Ohio.

📋 Description

• Provide cybersecurity support as a PMO/Capability Development Manager in accordance with DoDI 8500.01.

• Evaluate and consistently monitor cybersecurity risks to ensure compliance with RMF, CSF, NIST, and ISCM standards.

• Complete and sustain necessary cybersecurity certification as outlined in AFMAN 17-1303.

• Keep AF IT cybersecurity documentation current and easily accessible.

• Assist with authorization to operate, approval to connect, and implement corrective actions in plans of actions and milestones.

• Coordinate the creation of an ISCM strategy with PM and AO teams.

• Monitor both proposed and actual changes to systems and environments.

• Continuously oversee IT environments for security-relevant events.

• Evaluate the quality of configuration changes and the implementation of security controls.

• Report cybersecurity events and configuration changes that may impact authorization or security posture.

• Ensure that ISSOs and privileged users receive necessary technical training and maintain required certifications and clearances.

• Guarantee that AF IT is acquired, documented, operated, utilized, maintained, and disposed of appropriately.

• Validate, assess, and analyze findings from automated security testing and developer adjudications.

• Document cybersecurity deficiencies, vulnerabilities, and change requests within DoD tracking systems.

⛳️ Requirements

• U.S. Citizenship is required.

• A Master's or Doctorate Degree in a related field with 10 years of experience, including five years in the DoW; OR a Bachelor's Degree with 12 years of experience, including five years in the DoW; OR 15 years of directly relevant experience with necessary certifications, including eight years in the DoW.

• Highly proficient in the relevant technical/professional domain.

• Capability to execute tasks independently while supervising junior and journeyman contractor personnel.

• Advanced understanding of the technical/professional field with the capability to apply related standards, procedures, and practices.

• Experience in access control, configuration management, system and communications protection, contingency planning, incident handling, system and information integrity, security/privacy training, and cybersecurity software development activities.

• Practical experience performing cybersecurity responsibilities under DoDI 8500.01, AFI 17-130, and AFI 17-1301.

• Familiarity with validating and analyzing findings utilizing Fortify, Checkmarx, SonarQube, or AppScan.

• Experience with DoD tracking systems, including Jira, HP ALM, and eMASS.

• Background in conducting information security continuous monitoring (ISCM).

• Must possess an active T3/Secret security clearance, which must be maintained.

• Hold a current personnel certification related to DCWF ISSM work role 722 at advanced/senior proficiency, such as CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP-ISSMP, or CISSP.

• Preferred: Certified SCRUM Master or other Agile certifications.

• Preferred: Familiarity with Agile Development methodology.

• Preferred: Experience with CheckMarx, SonarQube, Jira, Confluence, Maven, Jenkins, and Bitbucket.

• Monday to Friday, 8:00 AM to 5:00 PM schedule.

• Remote hiring is approved for candidates outside Ohio.

🏝️ Benefits

• 100% employee-owned with ESOP participation.

• 401(k) matching available.

• Comprehensive medical insurance.

• Dental insurance coverage.

• Vision insurance options.

• Life insurance provided.

• Short-term disability coverage.

• Long-term disability insurance.

• Flexible spending accounts available.

• Health Savings Accounts offered.

• Health Reimbursement Accounts accessible.

• Employee Assistance Program (EAP) available.

• Education assistance provided.

• Paid time off benefits.

• Observance of holidays.

• Competitive salary package.

• Stable and professional work environment.

• Emphasis on work-life balance.