Job Description

CYBERSECURITY LIAISON

This position ensures continuous security, operational availability, and reliability of IT systems and equipment supporting the Production Corps mission. The position is responsible for processing account forms. The Cybersecurity Liaisons (CL) is also responsible for executing, and managing the following Cybersecurity Programs IAW regulations AFI 10-712, AFI 17-130 and AFMAN 17-1301.

a)         Network and Computer Security (COMPUSEC) Program

b)         Non-Secure Internet Protocol Routed Network (NIPRNet)

c)         Secure Internet Protocol Routed Network (SIPRNet)

d)         Communications Security (COMSEC) Program

e)         Emissions Security (EMSEC) Program

f)          Telecommunications Electronics Material Protected from Emanating Spurious

           Transmissions (TEMPEST)

g)         IA Notice and Consent certification program

h)        Telecommunications Monitoring and Assessment Program (TMAP)

i)          IT Management Programs:

• Mobile Satellite Services Program
• IT Asset Management Program

j)          Software Management Program

k)         Voice Services Program

l)          Information Management Programs:

• Records Management Program
• Web Management

Qualifications:  Security+ is highly recommended because of the breath and scope of the job.  Secret Security clearance is required.

Some of the activities include:

·         Ensure all users have the requisite security clearances, supervisory need-to-know authorization, and are aware of their cybersecurity (via cybersecurity training) before being granted access to Air Force IT according to AFMAN 17-1301, 12.17.5, and Chapter 4.

·         Develop, implement, oversee, and maintain SMC/Production Corps Cybersecurity program that identifies Cybersecurity requirements, personnel, processes, and procedures.

·         Implement and enforce all Air Force cybersecurity policies and procedures using the guidance within this instruction and applicable specialized (COMSEC, COMPUSEC, TEMPEST etc.) cybersecurity publications IAW AFI 17-130, 2.17.3.

 ·         Track progress and provide status on all Classified Message Incidents (CMI) and Data Spillage activities IAW AFMAN 33-282.

·         EMSEC Manager with assessments of Information Systems (IS) that processes classified information IAW Air Force Systems Security Instruction (AFSSI) 7700.

·         Analyze general information assurance‐related technical problems and provide basic engineering and technical support in solving these problems.

·     Work with USM, Subject Matter Experts (SME), and BCO to ensure proper procedures are followed in response to classified information spillages affecting AF ISs. CLs must have a SIPRNet account and SIPR access to reports Cybersecurity incidents or vulnerabilities to the BCO IAW AFI 17-203, Cyber Incident Handling.

·         Process Unclassified and Classified account requests and submit to appropriate office of primary responsibility (OPR) for account creation IAW AFMAN 17-1301.

·     Ensure all EMSEC and TEMPEST program requirements are met IAW Air Force Security System Instruction AFSSI 7700 and AFSSI 7702.

·     Perform self-assessments/reassessments for new and existing Certified Processing Areas (CPA) and notify the base TEMPEST Manager prior to any changes to the CPA IAW AFSSI 7700.

·     Create, submit, and maintain EMSEC/TEMPEST packages to obtain certification (90% of the SIPR rooms and Conference rooms must be EMSEC certified at any given time). At a minimum the EMSEC/TEMPEST packages shall include inspectable space, room diagram and rack elevation diagrams, floor plans, and equipment list.

·     Maintain SIPRNet Rooms daily IAW the Standard Form (SF) 701 End of Day Checklist.

·     Maintain and update the SIPRNet Rooms access control list, contact the Pass and ID office to add new users and delete old users from room access.

·     Notify SMC/Production Corps IT Lead if any equipment or connections within the SIPRNet room is not operational and provide updates on a daily basis until returned to operational status.

·     Verify and update the SIPRNet room access list and post on the outside of door on a monthly basis.

·   Schedule and provide SIPRNet training to all new users within three business days after receiving an account.

·     Research and analyze LAAFB Information Assurance (IA) security posture and impact of new systems, devices, and programs mandated by the AF and DOD.

·     Ensure the monitor and consent banner is on all electronic devices, DD 2056 is affixed to all phones, and users have signed an AF 4433 for mobile devices (i.e. iPhones/iPads).

·     Assist the TEMPSET Manager with assessments of information systems that process classified information IAW Air Force Systems Security Instruction (AFSSI) 7700.

·     Adhere to TEMPEST requirements when installing equipment and provide guidance to customers on completing TEMPEST packages.

·     Participate in the IA program review of SMC/Production Corps facilities semi-annually IAW AFI 90-201 – The Air Force Inspection System. Provide guidance to units on findings identified during the self-assessment inspection process.

·     Continuously monitor and update security patches on all classified and standalone systems.

·     Complete paperwork Livelink, NIPRNet and SIPRNet account indicated in Appendix D and send to the SMC Help Desk within 5 business  days after being initiated.

·   Maintain Livelink, NIPRNet, and SIPRNet network account requests forms in EIS.

·     Assist the Unit Security Manager (USM) with security analysis in vulnerability and risk assessments.

·     Assist the base cybersecurity office in meeting their duties and responsibilities IAW AF 117-130, 2.17.4.

Company Description

The core values of Liona Enterprises include trust, loyalty, respect, hard work and perseverance. We help leverage the potential of Information Technology in the workplace by providing comprehensive professional services for our clients both government and commercial.