Information Systems Security Officer (ISSO)

Job Description

ProSource360 Consulting Services, Inc. is seeking an Information Systems Security Officer (ISSO) to provide day-to-day cybersecurity and RMF support for the Tri-Service Research Laboratory (TSRL). Two ISSOs will support systems, networks, and standalone enclaves across NIPRNet, DREN, RDT&E, SIPRNet, and related environments. The ISSO maintains cybersecurity documentation and eMASS records, supports vulnerability scanning and remediation tracking, coordinates account access, and hel

Responsibilities

• Support RMF activities and ATO maintenance in accordance with NIST SP 800-53 Rev. 5, CNSSI 1253, DoDI 8510.01, and related directives.
• Enter, update, and monitor system information and cybersecurity documentation in eMASS, ITIPS, and the AFRL RMF Workflow.
• Prepare and maintain System Security Plans, Security Assessment Reports, POA&Ms, risk assessments, topology diagrams, hardware/software inventories, and security procedures.
• Conduct or support vulnerability scanning using ACAS or other Air Force-approved tools; review findings and track remediation.
• Maintain STIG hardening checklists and support corrective actions resulting from audits, inspections, and vulnerability findings.
• Support IAVM dissemination, reporting, and compliance tracking.
• Assist with configuration management reviews, internal and external audits, inspections, and AFRL Inspector General pre- and post-inspection activities.
• Coordinate user account onboarding and offboarding, including routing DD Form 2875 and related access documentation.
• Track cybersecurity training compliance and assist with maintaining DoD 8140 certification and training records.
• Provide cybersecurity customer support, including policy interpretation, configuration guidance, and responses to user questions.
• Support cloud cybersecurity activities and enterprise IT pilot projects involving virtualization, collaborative systems, mobile technologies, cloud services, and automation.
• Assist with MOAs, MOUs, and AOR letters supporting the RMF Accreditation Program.
• Support monthly AFRL Cybersecurity Working Group activities, including roll call, meeting notes, action tracking, and documentation.
• Schedule and complete quarterly media destruction and courier classified equipment or media within TSRL when required and authorized.