Information Systems Security Officer; ISSO

Overview

Information Systems Security Officer (ISSO).

Location:

Hurlburt Field, FL, JBSA, TX, and Keesler AFB, MS. Job Status:
Full time. Clearance:
Top Secret.

Astrion has an exciting opportunity for an ISSO to join our team and support the 39th Information Operations Squadron (39 IOS) located at Hurlburt Field, FL. We are preparing to hire for Journeyman, Senior, and SME levels. Anticipated start date March/April 2026. Cyber Operations Formal Training Support III (CyOFTS III) is a Cyber Schoolhouse program supporting delivery, development, and sustainment of cyber training across operationally relevant mission sets.

The team supports instruction, curriculum and content development, training operations, and program execution at multiple Air Force and joint training locations.

• Active Top Secret clearance
• IAT/M Level II certification
• Education and Experience will depend on the labor category level
• Previous Information System Security experience is required

• Perform Information Systems Security Officer duties consistent with the labor category and required RMF experience.
• Support Risk Management Framework (RMF) activities consistent with the required experience timeframe.
• Manage and perform records management for all Account Forms including Cybersecurity Awareness training for all students, Authorized User Agreements and associated user forms for all networks required for duty at the 39 IOS, System Authorization Access Requests, Privileged User Agreements, 8570/8140 validation, Operating System Certification validation, and associated user forms.
• Maintain appointment letters for work roles including Program Managers, ISSO, Information Systems Security Manager (ISSM), Information Systems Security Engineer (ISSE), Systems Administrators, Client Systems Technicians, and Cybersecurity Liaisons.
• Perform wireless scanning throughout the facility to ensure no rogue activity, review vulnerability scans on all networks, and respond to any vulnerabilities appropriately while conducting network audits on all networks.
• Manage and update Management Internal Control Toolkit (MICT) checklists for assigned programs including Privileged User, 17‑1301 Computer Security (COMPUSEC), and 17‑101 Risk Management Framework (RMF).
• Inspect equipment prior to the entry and exit of the facilities and ensure entry and exit logs are accomplished along with reviewing, updating, and enforcing Media Control policy including issuing and tracking removable media and ensuring media sanitization.
• Validate administrator accounts on all networks and respond to any discrepancies appropriately.
• Review equipment purchase requests to ensure items are on approved product listings and meet requirements to enter the facilities.
• Ensure cybersecurity marking and standards enforcement including Classification stickers and markings on all systems, Bomb threat aids posted by all phones, and Combined Security Cards posted by all workstations.
• Perform random bag and walkthrough inspections with the Security team, and respond to incidents and assist with response and reporting.
• Answer all TASKORDS/ taskers by MAJCOM for action on our owned networks including vulnerability remediation and data calls.
• Review, update, and enforce the Security Concept of Operations (SECONOPS) along with the contingency plan policy.
• Maintain Risk Management Framework (RMF) packages for all networks owned/operated by the 39 IOS including data calls, system packages, categorization, control selection, implementation, assessment, monitoring, accreditation package, SIA submissions for tenant changes and new software installation, and coordinate accreditation requirements for non‑squadron packages.
• Order, issue, manage, and account for all tokens granting access to network and audit issuance of student user tokens.
• Perform COMPUSEC and Information Security (INFOSEC) duties and manage the Cybersecurity Liaison program for the squadron under the direction of the Wing Cybersecurity Office.
• Support functions aligned to DCWF work roles (Information Systems Security Manager; Security Control Assessor; Cyber Defense Incident Responder) as applicable.
• Maintain and apply required IAT/M Level II certification within the scope of assigned duties.

*** This position is contingent upon contract award***