Information Systems Security Officer (ISSO) SE-3

Odyssey has an exciting opportunity for an Information Systems Security Officer (ISSO) SE-3 supporting the 46 Test Squadron - Sensors and Defensive Systems Flight (46 TS/TGBB) at Eglin AFB, FL. Working closely with the Information Systems Security Manager (ISSM), the ISSO will support Assessment & Authorization (A&A) activities for classified systems used by test engineers and data analysts. The ISSO will develop, maintain, and implement security documentation; define cybersecurity requirements for new and existing systems; and assist in the enforcement of security policies and standards for highly sensitive DoD/SAP environments.

This is a fulltime, onsite position at Eglin AFB, FL, with <10% CONUS/OCONUS TDY travel.</p> Responsibilities

Duties include, but not limited to: Lead and implement all phases of the Risk Management Framework (RMF) Assessment & Authorization (A&A) lifecycle for classified information systems

• Implement, assess, and monitor security controls to safeguard classified networks and information
• Perform vulnerability management activities including vulnerability assessments, Security Technical Implementation Guide (STIG) evaluations, and ACAS scans
• Perform Security Impact Assessments (SIA) and vulnerability analysis as part of Configuration Management (CM)
• Support and participate in incident response activities, including investigation, reporting, and mitigation actions
• Provide configuration management for all securityrelevant hardware, software, and firmware; validate that system changes comply with security policies
• Prepare, review, and maintain all security documentation including SSPs, Risk Assessment Reports, POA&Ms, hardware/software baselines, and complete Authorization to Operate (ATO) packages
• Ensure documentation is current, accurate, and accessible to authorized personnel
• Develop and provide security awareness training for personnel with access to classified systems
• Serve as a primary cybersecurity liaison with government customers, suppliers, and internal stakeholders
• Support audits, inspections, investigations, and compliancedriven cybersecurity requirements
• Oversee system and network designs involving diverse computing environments with multiple classification levels
• Perform other cybersecurity duties as assigned by the ISSM
• Interface with government approving authorities across the DoD in an informationsecurity role

Citizenship: U.S. Citizenship Required

Minimum Required Qualifications: Clearance: Active Secret required; must be able to obtain and maintain TS/SCI and SAP access

Education: Bachelor’s degree in a technical field and at least 3 years relevant technical experience (experience may substitute for education).

Years of Experience:3-10 years relevant technical/cybersecurity experience

Certifications: CompTIA Security plus (Security+) or CompTIA SecurityX (SecurityX - formerly known as CASP+) or CompTIA Cloud+ (Cloud+) or Certified Cloud Security Professional (CCSP) Systems Security Certified Practitioner (SSCP) or GIAC Security Essentials Certification (GSEC), Certified Information Systems Security Officer (CISSO) or Certified in Governance, Risk and Compliance (CGRC/CAP) or GIAC Cyber Security Analyst (GCSA) or Certified Information Systems Security Officer (CISSO) or Certified Chief Information Security Officer (CCISO)

• Experience with RMF, NIST 80053, JSIG, and A&A documentation
• Experience performing system vulnerability assessments, SIAs, and configuration management
• Experience generating formal cybersecurity documentation and reports

Preferred Qualifications

Clearance: TS/SCI

Certifications: Certified Information Security Manager (CISM) or Federal IT Security Professional-Manager (FITSP-M) or GIAC Certified Intrusion Analyst (GCIA) or GIAC Certified Incident Handler (GCIH) or GIAC Security Leadership Certification (GSLC) or GIAC Global Industrial Cyber Security Professional (GICSP) Certified Information Systems Security Professional - Information Systems Security Management Professional (CISSPISSMP) or Certified Information Systems Security Professional (CISSP)

• Experience with SCC/Evaluate STIG and ACAS
• Experience with Windows/Linux, virtual systems, network devices, databases, and web apps
• Experience with AF software/application certification processes
• Experience conducting cybersecurity audits using reduction tools

Technical Skills

• Strong understanding of SAP cybersecurity and secure system operations in onprem and cloud-based environments
• Understanding of RMF lifecycle for DoW systems in SAP environments
• Experience with NIST 80053 controls and JSIG requirements
• Experience designing, developing, or managing IT/cyber systems and integrating emerging technologies
• Experience leading IT activities ensuring compliance with legal, regulatory, and DoD/AF requirements
• Strong project management and documentation skills
• Experience with STIG evaluations, ACAS scans, SIA assessments, and vulnerability analysis
• Experience with auditing, incident response, and investigative cybersecurity activities
• Experience assessing Windows, Linux, virtual systems, network devices, and web applications
• Experience with ATO documentation including SSPs, RARs, POA&Ms, and hardware/software baselines
• Preferred: Experience with SCC/Evaluate STIG, ManageEngine EventLog Analyzer, and Air Force software certification assessments

Interpersonal Skills

• Strong oral and written communication skills
• Ability to negotiate complex issues and maintain effective working relationships
• Ability to lead studies, projects, and systemlevel cybersecurity initiatives
• Ability to collaborate with diverse engineering, operations, and program stakeholders
• Ability to work independently with high initiative and minimal supervision

Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.

Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.