Information System Security Officer

Work Arrangement

This is an onsite position in Dayton, OH.

Job Overview

As an Information System Security Officer (ISSO) – Classified Systems, you will be responsible for maintaining the security posture and regulatory compliance of classified information systems and secure rooms in accordance with DoD regulations and the Risk Management Framework (RMF). This role ensures the confidentiality, integrity, and availability of classified information in a secure production environment.

Essential Functions

• Maintain the security posture of the classified system and secure room, ensuring daily compliance with DoD, NIST, and RMF requirements.
• Manage RMF documentation including System Security Plan (SSP), Plan of Action and Milestones (POA&M), and continuous monitoring activities.
• Conduct vulnerability scanning, risk assessments, and remediation using tools such as ACAS and STIGs.
• Support Authority to Operate (ATO) packages, security incident response, and configuration management.
• Serve as the primary security Point of Contact (POC) for the system, working closely with system owners and authorizing officials.
• Perform classified material control, user access management, and security awareness activities.
• Perform other duties as required.

Standard Essential Functions

• Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
• Responsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices.
• Embodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.

Qualifications and Competencies

• Strong working knowledge of DoD RMF, NIST SP 800-53, CNSSI, and related security policies.
• Knowledge of access control procedures, media control, classified data handling, and COMSEC requirements
• Experience with Windows Server, Active Directory, endpoint security tools, and network security concepts
• Hands-on experience administering or monitoring security tools such as Splunk Enterprise
• Excellent written and verbal communication skills with strong documentation abilities.
• Ability to work effectively in a secure, compliance-focused environment.

Education / Certifications

• DoD 8570/8140 compliant certification (Security+, CISSP, or equivalent) required.
• Bachelor’s degree in Information Technology, Cybersecurity, or a related field preferred.

Experience

• 3+ years of ISSO or relevant DoD cybersecurity experience supporting classified systems.
• Hands-on experience with eMASS, ACAS, STIGs, and security documentation.
• Experience supporting classified environments and secure facilities.

Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties the employee is:

Frequently required to sit, and to reach to use computers and other office equipment

Security Clearance

• Active Secret clearance required; must be maintainable. U.S. Citizenship required.