Cyber Security Principal

Abacus Technology•Bedford, MA

About The Position

Abacus Technology is seeking a Cyber Security SME to serve as an Information System Security Manager (ISSM) and technical advisor for security issues for the Command, Control, Communication, Intelligence and Networks (C3I&N) Directorate at Hanscom AFB. This is a full-time position. The ISSM maintains the overall security posture of systems in the assigned organization and is accountable for implementing DoDI 8510.01. The role supports the Risk Management Framework (RMF), the system and application assessment and authorization (A&A) process, and the development and maintenance of formal information systems security programs and policies. The ISSM advises the Authorizing Official (AO), guides ISSO activities, coordinates security matters with organizational security staff and affected parties, and ensures appropriate responses to incidents, vulnerabilities, configuration changes, and potential or actual classified-data spills. The position also involves authoring, reviewing, certifying, and maintaining information assurance and security management documentation, and ensuring secure configuration and approval of IT products and services before they are accepted into or connected to DoD information systems.

Requirements

15+ years of experience in the IT field, including at least 10 years in a cybersecurity role.
Master’s degree in a related field; additional years of experience may substitute for degree requirements.
Certification compliant with DoDD 8140 IAM Level III, such as GSLC, CISM, and/or CISSP.
Familiarity with DIACAP, RMF, STIGs, and IA Controls.
Experience with development and architecture for applications and services, as well as testing and administration.
Strong knowledge of Microsoft Windows technologies, including Active Directory, Windows administration, scripting, and Windows configuration techniques.
Basic Linux experience, including Red Hat and Fedora.
Networking experience with routers, switches, and firewalls.
Experience with Cisco and Juniper.
Strong desktop application administration experience, including Microsoft Office, web browsers, and anti-virus applications.
Detail-oriented, with the ability to work in a multi-disciplined environment and an adaptive personality.
Excellent oral and written communication skills.
Analytical skills to troubleshoot IA issues.
Ability to apply intensive and diverse knowledge to problems and make independent decisions.
Ability to work professionally and collaboratively as a team player with the government customer and other contract team members.
Client focus.
Must be a U.S. citizen and hold a current Top Secret clearance.
Selected applicants will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

Nice To Haves

Familiarity with EITDR and eMASS.

Responsibilities

Serve as the Information System Security Manager (ISSM) and technical advisor to AOs, maintaining the overall security posture of systems within the organization and supporting implementation of DoDI 8510.01.
Support implementation of the Risk Management Framework (RMF).
Develop and maintain a formal information systems security program and policies for the assigned area of responsibility.
Support system and application A&A efforts by assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts required by DoD and Air Force policies, including RMF.
Ensure appropriate measures are taken when an information system incident or vulnerability is discovered.
Maintain and report information system and Platform Information Technology systems assessment and authorization status and issues in accordance with DoD Component guidance.
Direct the ISSO to ensure established cybersecurity policies and procedures are followed.
Coordinate with the organization’s security manager to address issues affecting the organization’s overall security.
Monitor compliance with cybersecurity policy, as appropriate, and review monitoring results.
Synchronize and coordinate cybersecurity inspections, tests, and reviews with affected parties and organizations.
Ensure implementation of information system security measures and procedures, including reporting incidents to the AO and appropriate reporting chains and coordinating system-level responses to unauthorized disclosures.
Ensure possible or actual spills of classified information resident in information systems are handled in accordance with DoD regulations.
Act as the primary cybersecurity technical advisor to the AO for DoD information systems and Platform Information Technology systems under the role’s purview.
Formally report cybersecurity-related events and configuration changes that may affect authorization or security posture to the AO and other affected parties.
Ensure secure configuration and approval of IT below the system level, including products and IT services, in accordance with applicable guidance before acceptance into or connection to a DoD information system or Platform Information Technology system.
Author, review, certify, and/or maintain IA and security management plans and related documentation, including RMF Implementation Plans, System Security Management Plans, Information Support Plans, PPPs, Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, OPSEC Plans, and other system or network security documents.