Information Systems Security Officer

Metro Professional Services, a distinguished 8(a) Woman-Owned Small Business (WOSB) specializing in professional services, aircrew training, and IT support, is seeking a qualified Information Systems Security Officer (ISSO) to support a contract opportunity for Headquarters Air Combat Command (HQ ACC), 414th Combat Training Squadron (414 CTS), at Nellis Air Force Base, Nevada.

The selected candidate will be responsible for ensuring the appropriate operational security posture is maintained for assigned information systems while supporting Sensitive Compartmented Information (SCI), Special Technical Operations (STO), Special Access Program/Special Access Required (SAP/SAR), and collateral cybersecurity requirements.

The ISSO will provide day-to-day information systems security support and assist with SCIF/SAP security management in accordance with applicable Department of Defense (DoD), Department of the Air Force (DAF), Intelligence Community, and Special Access Program requirements. The position requires access to Communications Security (COMSEC) information at on-base locations.

Key Responsibilities

The selected candidate shall independently perform the following information systems security and cybersecurity functions:

• Ensure the appropriate operational security posture is maintained for assigned information systems.
• Develop, implement, and maintain formal information systems security programs, policies, procedures, and technical safeguards.
• Support information security continuous monitoring activities and evaluate system security, performance, and availability.
• Monitor and assess host- and network-based intrusion detection capabilities and identify potential security incidents, threats, and vulnerabilities.
• Implement and oversee security controls governing the use, processing, storage, and transmission of classified information.
• Support the implementation and security management of multiple classified networks, including JWICS and CV2 networks.
• Apply network security architecture principles, including defense-in-depth, network topology, protocols, components, and security controls.
• Configure and support TACLANE devices in accordance with applicable security and operational requirements.
• Perform network traffic analysis and support identification and mitigation of potential network attacks.
• Manage information systems access controls, including information security requirements associated with access badge systems.
• Support network systems management, system performance monitoring, and security of server and client operating systems.
• Develop and maintain policies that reflect organizational and system security objectives.
• Monitor new and emerging cybersecurity technologies, threats, threat vectors, vulnerabilities, security alerts, advisories, errata, and bulletins.
• Apply knowledge of penetration-testing principles, methodologies, tools, and techniques in support of cybersecurity requirements.
• Support physical, personnel, industrial, and information security requirements associated with classified operations.
• Provide direct support to the day-to-day administration of STO and SAP/SCI information security programs.
• Ensure foreign-national information systems comply with applicable DoD/DAF policy and Joint Special Access Program Implementation Guide (JSIG) requirements when supporting STO and SAP/SCI exercises and events.
• Implement and maintain STO, SAP/SCI, and collateral cybersecurity measures.
• Support STO and SAP/SCI personnel security requirements associated with daily operations, exercises, and events.
• Support STO operations as an STO/CAB ISSO, applying applicable IJSTO/CJCSI policies, CAB Management Plans, and STO requirements.
• Support COMSEC requirements, including applicable policies, procedures, operating instructions, and Emergency Action Plans.
• Maintain knowledge of data backup and recovery procedures and support system restoration and continuity requirements.
• Assist with SCIF/SAP security management in accordance with applicable security requirements.
• Maintain required documentation and ensure systems remain compliant and inspection-ready.
• Coordinate with cybersecurity, information technology, security, and Government personnel to identify and correct security deficiencies.
• Support joint, cyber, space, and multinational exercise requirements as necessary.

Candidates must possess:

• Minimum three (3) years of experience providing security management support to TS/SCI, STO, and SAP/SAR-level programs, including support to joint and multinational exercises.
• Experience supporting information systems security, cybersecurity, or classified network operations.
• Experience in Specialty Code/Area 0080, or at least one (1) year of classified vault management experience.
• Knowledge of JWICS and CV2 classified networks, including applicable network architectures, protocols, components, and security principles.
• Knowledge of TACLANE operation and configuration.
• Knowledge of intrusion detection, continuous monitoring, network traffic analysis, vulnerability management, and cybersecurity threat identification.
• Knowledge of server and client operating systems and network systems management.
• Knowledge of physical, personnel, industrial, and information security requirements.
• Knowledge of STO, SAP/SCI, collateral cybersecurity, and information security requirements.
• Knowledge of applicable IJSTO/CJCSI policies, CAB Management Plans, and STO requirements.
• Knowledge of COMSEC policies and procedures.
• Proficiency with Microsoft Office Suite, including Word, Excel, PowerPoint, and Outlook.
• Strong organizational, analytical, communication, technical documentation, and problem-solving skills.
• Ability to independently perform information systems security duties within highly classified environments.

Security Clearance & Certification Requirements

Candidates must:

• Possess an active Top Secret security clearance.
• Be capable of obtaining and maintaining TS/SCI, STO, and SAP/SAR access.
• Be eligible for access to COMSEC information at on-base locations.
• Possess and maintain a Security+ certification in accordance with IAM Level I requirements.

Preferred Experience

Highly qualified candidates will have previous experience supporting:

• Special Technical Operations (STO)
• SAP/SAR and SCI environments
• JWICS and CV2 networks
• SCIF or SAP facility operations
• Joint and multinational military exercises
• Classified vault management
• COMSEC operations
• Cybersecurity and information assurance programs within a DoD or Department of the Air Force environment

Pulled from the full job description

• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance, * 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Metro Professional Services is committed to delivering exceptional support to our government customers while fostering a collaborative, professional, and mission-focused work environment.