Today
Top Secret
Unspecified
Polygraph
IT - Security
Mountain Home AFB, ID (On-Site/Office)
Description
BlueForce Inc is seeking Mission Planning Support (MPS) F-15 Information System Security Manager (ISSM) Support Specialists in support of the Combat Air Forces (CAF) Fighter Squadron (FS), United States Air Force Warfare Center (USAFWC) flying units, and Air Support Operations Squadrons (ASOS) in Air Combat Command (ACC).
The MPS F-15 ISSM Support position will manage the security aspects of F-15 Training Systems and coordinate with designated stakeholders to ensure cybersecurity protocols of the F-15 Training Systems. Locations are Eglin AFB, FL, Mountain Home AFB, ID, Nellis AFB, NV and Seymour-Johnson AFB, NC.
***Subject to Contract Award***
Tasks the Contractor shall perform include, but are not limited to:
Qualifications
BlueForce Inc is seeking Mission Planning Support (MPS) F-15 Information System Security Manager (ISSM) Support Specialists in support of the Combat Air Forces (CAF) Fighter Squadron (FS), United States Air Force Warfare Center (USAFWC) flying units, and Air Support Operations Squadrons (ASOS) in Air Combat Command (ACC).
The MPS F-15 ISSM Support position will manage the security aspects of F-15 Training Systems and coordinate with designated stakeholders to ensure cybersecurity protocols of the F-15 Training Systems. Locations are Eglin AFB, FL, Mountain Home AFB, ID, Nellis AFB, NV and Seymour-Johnson AFB, NC.
***Subject to Contract Award***
Tasks the Contractor shall perform include, but are not limited to:
- Manage the security aspects of F-15 Training Systems and support the Government with obtaining and maintaining Interim Authorities to Test (IATTs), Authorizations to Operate (ATOs), Interconnection Security Agreements (ISAs), Authorities to Connect (ATCs), and similar.
- Coordinate with the F-15 Training Systems Program Office (TSPO), Air Force Life Cycle Management Center (AFLCMC) SPO Simulators Division (WNS) at Wright-Patterson Air Force Base (AFB), local Government personnel using the F-15 Training Systems, and the F-15 Training Systems prime contractor to ensure the cybersecurity of the F-15 Training Systems.
- Ensure F-15 Training Systems are operated and maintained IAW security policies and procedures as required by the Joint Special Access Program (SAP) Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and F-15 Training Systems security policy. Support the Government in ensuring F-15 Training Systems and related equipment is disposed of IAW the JSIG, NISPOM, and F-15 Training Systems security policy.
- Ensure all users of F-15 Training Systems have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before creating accounts and granting them access to the F-15 Training Systems. Perform validation transfers and user account terminations.
- Monitor and report all security-related incidents to the local F-15 Training Devices lead, Security team, and the F-15 TSPO within 24 hours of identifying or being made aware of the incident(s). Perform necessary activities, including media control and proper storage, to prevent spillage/loss of F-15 Training Systems program information. Assist the Government in investigating the root cause incident(s) and developing Corrective Action Plan to prevent recurrence of the incident(s).
- Monitor various systems in the vault to ensure connections with external systems are properly maintained, recovery processes properly restore security features, and all restored features function correctly.
- Collect and review F-15 Training Systems audit, tools, and maintenance logs on a quarterly basis. Document and report any deficiencies in the logs to the F-15 TSPO.
- Conduct quarterly reviews of user and equipment lists for accuracy and currency. Coordinate with the F-15 Training Systems prime contractor to rectify any discrepancies and ensure the lists accurately reflect authorized users and equipment.
- Perform quarterly compliance and vulnerability scans and reviews of the F-15 Training Systems. Document all identified deficiencies and their associated system risks. Submit a report of these findings to the F-15 TSPO and the local government lead for F-15 Training Devices within five business days of completing the scan.
- Perform an annual risk assessment for the F-15 Training Systems. This risk assessment shall be provided to the F-15 TSPO at least 60 calendar days prior to the end of each calendar year.
- Perform an annual inventory of the F-15 Training Systems and associated sub-assemblies. Results of the inventory shall be submitted to the F-15 TSPO at least 30 calendar days prior to the end of the calendar year.
- Conduct quarterly self-assessments/inspections and inform the F-15 TSPO when any authorizations/approvals are projected to expire within six months. Assist with the necessary activities to obtain new authorizations/approvals. If an expiration date is within six months of the F-15E MPS ISSM's start date, the F- 15 MPS ISSM shall inform the F-15 TSPO at least 90 calendar days prior to expiration and assist the Government in obtaining any necessary extensions and/or new authorizations/approvals.
- Coordinate with the Government and the F-15 Training Systems prime contractor to support the creation, updating, and maintenance of authorization/approval packages required per the JSIG/Risk Management Framework (RMF) or the F-15 Training Systems. Ensure all information is accurate, current, complete, and submitted on time to avoid program disruptions. Conduct security surveys at subordinate facilities and gather pertinent security documentation for inclusion into system authorization/approval packages. These packages include, but are not limited to:
- System Security Plan (SSP)
- Plans of Actions and Milestones (POA&Ms)
- Security Control Traceability Matrix (SCTM)
- Continuous Monitoring Plan (CONMON)
- Information Assurance Standard Operating Procedures (IASOP)
- Hardware Lists
- Software Lists
- Support assessments of F-15 Training Systems and their locations by ensuring all necessary documentation, reports, and data are readily available to assessing officials. Assist in addressing any assessing official questions or comments. Report any identified deficiencies to the F-15 TSPO within 14 calendar days of the assessment. Work with the government to address these deficiencies and implement any required mitigation processes or procedures as directed by the assessing officials.
- Review, prepare, track, and update AIS authorization packages and AIS inspections, reports, and responses. Notify the local Government F-15 Training Devices program and the F-15 TSPO (AFLCMC/WNS) when changes occur that might affect AIS authorization. Perform AIS self-inspections and provide security coordination and review of all system test plans. Identify any AIS vulnerabilities, recommend countermeasures, and support their implementation.
- Review, track, and conduct AIS training.
- Maintain AIS security records and prepare Co-Utilization Agreements for network nodes operating in government facilities. Ensure AIS and network nodes are operated, maintained, and disposed of IAW security policies and practices.
- Prepare reports on the status of security safeguards applied to computer systems.
- Support various technical review and inspection teams.
- Assist Government and Contractor organizations with assessment and authorization (A&A) efforts.
- Conduct vault opening or closing procedures as required.
Qualifications
- TS clearance with SCI and SAP/SAR eligibility and willingness to submit to a Counterintelligence polygraph.
- 2 years of experience with USAF fighter squadron, group, or wing weapons and tactics shop security-related operations (A-10 unit or F-15 unit experience desired) OR 2 years of experience with DoD flying squadron, group, or wing weapons and tactics.
- 2 years of experience with DoD and USAF security guidelines regarding computer and network security up to a TS SAP level.
- 2 years of experience with current system software supported at the organization to include operating system and application software packages as identified by the Government Site Lead/Point of Contact.
- Holds current CompTIA Security+ (CE), and DoDM 8140.03 certifications and can transition to DoDM 8140.03 specifications.
- 2 years of experience using and maintaining computer systems/networks, equipment, and software; and to train users on new computer systems used to support mission debrief.
group id: 10199013
