Peraton requires Information Systems Security Officer (ISSO) Analysts to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3.  This position is located at Stuttgart, Germany and requires TESA approval. 

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The ISSO ensures the operational security posture of Department of Defense (DoD) information systems through the implementation of the Risk Management Framework (RMF), continuous monitoring, and the execution of robust cybersecurity practices. The role supports compliance with DoD policies, oversees system administration, and provides subject matter expertise in cybersecurity and risk management.

Duties include but are not limited to: 

• Apply cybersecurity principles to ensure system integrity, confidentiality, and availability 
• Perform routine vulnerability assessments, software scans, patches, and updates to meet APEN RMF requirements
• Oversee daily control implementations for DoD information systems certification and compliance 
• Coordinate with Information System Security Managers (ISSM) to resolve cybersecurity issues
• Perform preliminary analysis and technical assessment of cyber incidents
• Document incidents and provide root cause analysis, impact assessments, and post-incident recommendations 
• Assist in developing reports and data related to classified material incidents, INFOCON changes, and network activity summaries 
• Provide direct support to incident response and disaster recovery operations, including containment, eradication, and risk mitigation
• Provide expertise to Operational Planning Teams (OPT) for Defensive Cyber Operations (DCO) and Operational Security (OPSEC) 
• Coordinate the execution and compliance monitoring of Communication Tasking Orders (CTO) and Operational Directive Messages (ODM)
• Manage cross-domain transfers, auditing, and account provisioning to maintain data fidelity
• Assist with IG/CORA audits and prepare systems for inspections
• Support system setup, maintenance, and upgrades, ensuring compliance with information assurance requirements
• Maintain records management databases and oversee ADPE inventory control 
• Collaborate with stakeholders to align system configurations with DoD Cloud Computing Security Requirements and STIG/SRG standards 
• Conduct staff training on cybersecurity best practices
• Recommend and implement improvements to incident response, enterprise policies, and security procedures based on lessons learned

Required Qualifications: 

• Minimum of 7 years with AS/AA; 5 years with BS/BA; 3 years with MS/MA
• 11 years of relevant experience with HS will be considered in lieu of formal education to meet TESA requirements
• DoD 8570.01-M IAT II certification
• DoD TS/SCI clearance is required for this role
• Familiarity with FISMA, FedRAMP, and DISA STIG compliance 
• Strong communication skills for stakeholder engagement and incident documentation

Desired Qualifications: 

• Experience with NIST 800-37, FISCAM, and similar frameworks 
• Expertise in using tools like STIG Viewer for system hardening
• Knowledge of COMSEC protocols and classified material handling procedures         

         #SITEC2024