ARL Information Systems Security Officer (ISSO)

University of Texas at Austin•Austin, TX

43d•Onsite

About The Position

Meeting ARL:UT's Risk Management Framework requirements for National Security computing environments as defined by the National Institute of Standards and Technology 800-Series, Committee on National Security Systems Instructions, NISPOM Requirements, and the DCSA Assessment and Authorization Program Manual (DAAPM) and/or DCSA Assessment and Authorization Guide (DAAG).

Requirements

HS/GED.
Three years of experience with auditing various operating systems and networks.
Technical experience in supporting security configurations of Windows/Linux operating systems.
Strong communication, critical thinking, and problem-solving skills with the ability to prioritize projects..
Relevant education and experience may be substituted as appropriate.
US Citizen. Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to the project requirements of the position. Employment is contingent on selected applicant submitting application for access and receiving notification of eligibility within a time period specified in the job offer. Employment must begin within 30 days of confirmation of eligibility. Eligibility for access to classified information must continue without interruption during employment. Employment will be contingent on selected applicant obtaining a DoDM 8570.01 compliant certification, equivalent to IAT Level II within 6 months of start date. Continued compliant certification, equivalent to IAT Level II is required during employment.

Nice To Haves

Bachelor's Degree: Computer Science, Information Systems Management, Cybersecurity, or related field.
Eligibility for immediate access to classified information at the level appropriate to the project requirements of the position.
Five years of experience in information security in a National Security computing environment.
Three years of experience with the Risk Management Framework methodology. Windows Operating System and Linux Operating System certifications.
Experience conducting security audits of information systems.
SIEM Tool Experience (ArcSight, Splunk, Wireshark, etc.).
Experience with vulnerability/compliance scanning tools (ACAS/Nessus, Retina, MBSA, SCAP, etc.).
Experience with the implementation of STIG/SRG compliance configurations.

Responsibilities

Responsible for conducting the professional auditing of collateral classified Information Systems at the Applied Research Laboratories: University of Texas at Austin (ARL), in order to maintain compliance with the DCSA Assessment and Authorization Guide (DAAG).
Assist in conducting audit interviews and preparing interview notes, performing audit tests, and develop and monitor remediation plans for identified issues.
Assist in verifying that Lab wide information security standards, policies, and practices are being followed, and closely coordinate with and provide training and guidance to others within the laboratory, on ensuring and maintaining the security posture of all information systems as well as implementing security control requirements.
Responsible for assisting in the verification that classified information systems meet the Risk Management Framework requirements for National Security computing environments as defined by the National Institute of Standards and Technology 800-Series, and the Defense Counterintelligence and Security Agency Assessment and Authorization Guide.
Other related functions as assigned.