Title Information System Security Officer (ISSO) Req Number CYB-26-00006 Requisition Category ACTIVE Full-Time/Part-Time Full-Time Location Wright Patterson AFB, OH Description Pay Rate: The annual base salary range for this position TBD. Please note that the salary information is a general guideline only. At Sawdey Solution Services, we recognize that attracting the best talent is key to our strategy and success as a company. We will consider several factors when extending an offer to an applicant. These factors include (but are not limited to) the position, associated responsibilities, work experience, education, related training, and related skills. Position Location: Wright-Patterson Air Force Base Telework/Work-from-Home Authorized: Yes - When Authorized/Hybrid About the Role: The Cybersecurity/Information System Security Officer (ISSO) will provide Cross Domain Solutions (CDS) Network Architect Certification and Accreditation (C&A) support and oversee day-to-day cybersecurity operations and Risk Management Framework (RMF) activities for assigned information systems, including classified and cross-domain environments at the Secret level and below. Responsibilities include ensuring compliance with DoDI 8510.01, Risk Management Framework for DoD Information Technology, AFI 17-101, Risk Management Framework for Air Force Information Technology, and applicable Air Force Research Laboratory (AFRL) RMF guidance and policies. The ISSO will support the implementation, documentation, assessment, and testing of applicable Information Assurance (IA) security controls; develop and maintain required security artifacts, including network topology diagrams, hardware and software inventories, ports and protocols lists, and Plans of Action and Milestones (POA&Ms); conduct and support vulnerability assessments and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) compliance reviews; track and coordinate remediation activities; and support Interim Authorization to Test (IATT) and Authorization to Operate (ATO) processes in coordination with the Information System Security Manager (ISSM), Authorizing Official (AO), and other system stakeholders. Additional Responsibilities Include, but are not Limited To: Serve as the assigned Information System Security Officer (ISSO) for one or more information systems, networks, laboratories, flight-test environments, or Cross Domain Solutions (CDS), including classified and Secret-and-below environments and, when assigned, SCI environments. Support the implementation, documentation, assessment, and testing of applicable security controls in accordance with the Risk Management Framework (RMF). Develop, update, and maintain RMF documentation and security artifacts in eMASS, Xacta, EBS, or other customer-designated systems, including: System Security Plans (SSPs) and Security Assessment Reports (SARs). Plans of Action and Milestones (POA&Ms) and security control implementation statements. Network architecture and topology diagrams. Hardware and software inventories. Ports, protocols, and services documentation. Supporting security assessment evidence and compliance records. Conduct and coordinate vulnerability scans, Assured Compliance Assessment Solution (ACAS) reviews, and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) assessments. Analyze findings, assess potential impacts, and recommend corrective actions to mitigate identified risks. Track remediation activities, security control deficiencies, and POA&M milestones, escalating unresolved risks and overdue actions to the Information System Se