C-17 Cybersecurity Specialist / ISSO

KBR, Inc.•Warner Robins, GA

1d•Hybrid

About The Position

In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. You will research C-17 cybersecurity issues related to C-17 cybersecurity strategies and program protection planning, providing documented findings and conclusions for use by the C-17 Division. You will create and deliver documentation required by the Authorizing Official for Interim Authority to Test (IATTs) and Authority to Operate (ATO) for C-17 Modification Programs according to the Risk Management Framework (RMF). You will identify issues and discrepancies in program documentation (e.g. concept, requirements, design, manuals, reports, deficiency/change reports and program schedules) to ensure that established security requirements are adequately addressed and sustained. You will conduct research on components that comprise integrated weapons systems such as data environments, software, data, and hardware to identify the requirements and risks. You will research and identify component and subsystem vulnerabilities and risks in order to determine potential solutions and safeguards including system survivability and interoperability. You will diagnose systems to ensure cyber security controls, risk mitigations, and testing are in compliance as they relate to RMF while confirming completion status of risk mitigation actions. You will deliver documentation required to answer questions from the Cyber Resiliency Office for Weapon Systems (CROWS) office, as well as the C-17 Weapon System Security Working Group (WSSWG). You will generate solutions to complex cyber security issues in a dynamic, responsive, and collaborative environment, contributing to protecting the C-17 weapon system against advanced, persistent threats.

Requirements

Bachelor's degree and minimum of 10 years of Information Systems Security experience. In lieu of the degree an additional eight (8) years related professional experience is required.
DoD 8570.01-M IAM Level II certification is required.
The individual must possess a minimum of a Secret clearance
Demonstrated experience in: Risk Management Framework (RMF) Life cycle support on DOD acquisition programs, with experience in sustainment and developmental phases
Collaborating with Program Offices on Weapon Systems Programs through acquisition life cycle phases
Weapon system/airborne platform software, avionics or networking
Familiarity with DoD 5000.02 acquisition policies

Responsibilities

Research and generate draft authorization documentation required by the Authorizing Official (AO) to support Interim Authority to Test (IATTs) and Authority to Operate (ATO) for C-17 Modification Programs
Monitor action items and mitigation actions for cyber security risk management activities, generating or contributing to an accurate and up-to-date Plan of Action and Milestones (POA&M)
Research and deliver documentation required to answer questions from the Cyber Resiliency Office for Weapon Systems (CROWS) office, as well as the C-17 Weapon System Security Working Group (WSSWG).
Research and generate or make contributions to cyber-centric documents such as the Program Protection Plan (PPP), Information Support Plan (ISP) and other similar or related documents
Research and provide documented observations and conclusions on C-17 engineering and other documentation for cyber security impacts to the aircraft.