Contractor SAP Security Officer (CSSO)

The MITRE Corporation•McLean, VA

21h•Onsite

About The Position

MITRE is seeking a consumer engagement focused Contractor SAP Security Officer (CSSO) to manage security administration and ensure compliance for a multi-level program and associated classified areas at its McLean, Virginia, headquarters. The ideal candidate will demonstrate exceptional interpersonal skills, a proactive approach to addressing mission needs, and a commitment to delivering seamless security support to internal and external stakeholders. This role requires the ability to foster strong relationships, provide clear guidance, and act as a trusted resource for program teams, ensuring security processes align with mission objectives. The CSSO will: Be listed as Contractor SAP Security Officer (CSSO) of record for the SCI and SAP information to the program, respectively. Be responsible for professional, independent engagement, and collaboration with sponsor security to ensure adherence to regulations and guidelines. Be capable of independent decision-making, possess a high degree of individual initiative and organizational skills, and function with minimal supervision. Supervise the operation of the special security area and administer MITRE’s SCI and SAP security program to include security oversight for areas and programs within their cognizance. Maintain applicable SCI and SAP directives, regulations, manuals, guidelines, and instructions to adequately discharge their duties and responsibilities. Manage and maintain the proper documentation required for all facilities and programs under his/her cognizance. Conduct and manage SCI and SAP personnel, information, physical and technical security (e.g., TEMPEST and TSCM) actions and procedures in accordance with Sponsor regulations. Properly account for, control, transmit, package, and safeguard SCI and SAP information, and will provide for destruction of SCI and SAP materials by authorized means in accordance with Sponsor regulations. Properly account for, control, transmit, package, and safeguard COMESEC information, and administer periodic software and cryptographical key updates. Certify and receive SCI and SAP visitor clearances and accesses. Create and implement Concept of Operations, Standard Operating Procedures, and other local area directives. Maintain the appropriate official system of record (SOR) accurately reflecting all personnel within their cognizance. Perform all aspects of the SCI and SAP Personnel Security Program (PSP) to include, but not limited to, nomination interviews, validation of Collateral, SCI and SAP access requirements, submission of investigative requests and nomination packages, conduct Collateral, SCI and SAP security briefings, obtain signed NDA and NDS, and perform other personnel security actions. Conduct a continuing SCI and SAP security education training and awareness program to ensure all Collateral-briefed, SCI-indoctrinated and SAP-briefed individuals are kept apprised of the requirements and guidelines for protecting SCI and SAP information, emphasizing unauthorized disclosure awareness, classification management, reporting, and day-to-day security program execution. Maintain appropriate accreditation documentation for each program, communications system, and IS within the special security areas under their cognizance, and conduct annual SCI and SAP self-inspections and address any shortcomings. Review and update the DD Form 254 for programs operating within the special security areas under their cognizance. Assist counterparts in the Information Systems Security (R311) Department for pre-coordination, accreditation, and installation of classified IS.

Requirements

Typically requires a minimum of 5 years of related experience with a Bachelor’s degree; or 3 years and a Master’s degree; or a PhD with relevant experience who can immediately contribute at this job step; or equivalent combination of related education and work experience
Must have demonstrable experience in developing and implementing Standard Operating Procedures (SOPs) and Concept of Operations (ConOps).
Must have experience in Special Programs, Program Security, SCI/SAP security, or Collateral Security.
Must have experience conducting and managing inspection preparedness and/or participation in government security inspections.
Must have experience in any of the following; JADE, DISS, SIMS, or Scattered Castles.
Must have experience in one of the following areas: Industrial or Government Security involving Counterintelligence, Personnel Security, Information Security, Information Systems Security, Physical Security, Technical Security, hands-on supervisory Security Leadership, or Project Management.
Must have evident experience implementing related areas of: IC Standards or Directives; DoD Directives, Instructions, Manuals, or Standards, i.e., DoDM 5105.21 and DoDM 5205.07; 32 Code of Federal Regulations Part 117, National Industrial Security Program Operating Manual (NISPOM); or related government regulation.
Must have excellent verbal and written communication skills and be able to effectively work with all levels of management and key management personnel.
Active Top Secret clearance with SCI.
Per the U.S. Government’s eligibility requirements, you must be a U.S Citizen to be considered for a security clearance

Nice To Haves

5+ years of experience in one of the technical areas above.
Experience with SIMS, DISS, JADE, Scattered Castles

Responsibilities

Be listed as Contractor SAP Security Officer (CSSO) of record for the SCI and SAP information to the program, respectively.
Be responsible for professional, independent engagement, and collaboration with sponsor security to ensure adherence to regulations and guidelines.
Be capable of independent decision-making, possess a high degree of individual initiative and organizational skills, and function with minimal supervision.
Supervise the operation of the special security area and administer MITRE’s SCI and SAP security program to include security oversight for areas and programs within their cognizance.
Maintain applicable SCI and SAP directives, regulations, manuals, guidelines, and instructions to adequately discharge their duties and responsibilities.
Manage and maintain the proper documentation required for all facilities and programs under his/her cognizance.
Conduct and manage SCI and SAP personnel, information, physical and technical security (e.g., TEMPEST and TSCM) actions and procedures in accordance with Sponsor regulations.
Properly account for, control, transmit, package, and safeguard SCI and SAP information, and will provide for destruction of SCI and SAP materials by authorized means in accordance with Sponsor regulations.
Properly account for, control, transmit, package, and safeguard COMESEC information, and administer periodic software and cryptographical key updates.
Certify and receive SCI and SAP visitor clearances and accesses.
Create and implement Concept of Operations, Standard Operating Procedures, and other local area directives.
Maintain the appropriate official system of record (SOR) accurately reflecting all personnel within their cognizance.
Perform all aspects of the SCI and SAP Personnel Security Program (PSP) to include, but not limited to, nomination interviews, validation of Collateral, SCI and SAP access requirements, submission of investigative requests and nomination packages, conduct Collateral, SCI and SAP security briefings, obtain signed NDA and NDS, and perform other personnel security actions.
Conduct a continuing SCI and SAP security education training and awareness program to ensure all Collateral-briefed, SCI-indoctrinated and SAP-briefed individuals are kept apprised of the requirements and guidelines for protecting SCI and SAP information, emphasizing unauthorized disclosure awareness, classification management, reporting, and day-to-day security program execution.
Maintain appropriate accreditation documentation for each program, communications system, and IS within the special security areas under their cognizance, and conduct annual SCI and SAP self-inspections and address any shortcomings.
Review and update the DD Form 254 for programs operating within the special security areas under their cognizance.
Assist counterparts in the Information Systems Security (R311) Department for pre-coordination, accreditation, and installation of classified IS.