Information Systems Security Officer 2 (ISSO 2)

Worker Type

Regular

Job Description

 

Location: Kirtland Air Force Base
Employment Type: Half-Time (0.5 FTE)

Position Summary

We are seeking a part-time Information Systems Security Officer (ISSO) to support our DoD Mission Services team. The ISSO will be responsible for helping ensure the confidentiality, integrity, and availability of information systems supporting Department of Defense programs. This position requires strong knowledge of cybersecurity principles, the Risk Management Framework (RMF), and the Authorization to Operate (ATO) lifecycle.

The ISSO will initially support two systems through the ATO process, with the expectation of supporting additional systems as the program portfolio grows.

As a T3 professional, the selected candidate will work independently to solve complex security challenges while collaborating with system owners, engineers, and program leadership to maintain compliance with DoD cybersecurity

requirements.

Key Responsibilities

• RMF & ATO Support

• Serve as the primary cybersecurity advisor for assigned systems, guiding system owners and engineering teams through the RMF lifecycle to achieve and maintain ATO authorization.

• System Security Documentation

• Develop, maintain, and update the System Security and Privacy Plan (SSPP) and associated RMF artifacts including control implementations, assessment documentation, and continuous monitoring evidence.

• Risk & Vulnerability Management

• Maintain and manage the Plan of Action and Milestones (POA&M) to track and remediate identified security weaknesses. Review and analyze vulnerability scan results and conduct security impact analyses for system changes.

• Continuous Monitoring

• Support ongoing continuous monitoring activities, including control validation, security posture reviews, and coordination with system administrators and engineers.

• Security Assessments

• Participate in or lead security assessment activities, including internal audits and control assessments, to ensure compliance with DoD cybersecurity policies and standards.

• Incident Response

• Assist with the investigation, reporting, and mitigation of cybersecurity incidents, ensuring appropriate documentation and coordination with program leadership and security personnel.

• Stakeholder Communication

• Explain complex cybersecurity requirements to technical and non-technical stakeholders to support program compliance and operational success.

Required Qualifications Experience

Minimum of:

• US Citizenship

• Ability to obtain and maintain a DoD security clearance.

• 5 years of related experience with a Bachelor’s degree, OR

• 3 years with a Master’s degree, OR

• PhD without experience, OR Equivalent combination of education and relevant work experience.

• RMF / ATO Experience

• Hands-on experience implementing the Risk Management Framework (RMF) and supporting ATO authorization for DoD or federal systems.

• Ability to work independently with minimal supervision while effectively collaborating with system owners, engineers, and program leadership.

Preferred Experience

• Experience supporting systems that process or store Controlled Unclassified Information (CUI) and familiarity with DoD cybersecurity compliance standards is highly desirable.

Technical Knowledge

Strong understanding of:

• NIST cybersecurity frameworks and guidance (SP 800-53, SP 800-37)

• System security documentation and control implementation

• Network security principles and operating system security

• Problem Solving

• Demonstrated ability to analyze complex cybersecurity issues and apply sound technical judgment.

Desired Certifications

One or more of the following certifications are preferred:

• CISSP – Certified Information Systems Security Professional

• CompTIA Security+

• CISM – Certified Information Security Manager

• CISA – Certified Information Systems Auditor

Clearance Level

 

TS/SCI

The salary range for this role is:

$21 - $30

AeroVironment considers several factors when extending an offer, including but not limited to, the location, the role and associated responsibilities, a candidate’s work experience, education/training, a