Cybersecurity – Information System Security Officer (ISSO)

Boeing • Berkeley, MO

3d

About The Position

Boeing Classified Cybersecurity is currently seeking a highly motivated Cybersecurity – Information System Security Officer (ISSO) to join their team in Berkeley, MO or Hazelwood, MO . The selected candidate will rely on Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information. Position Responsibilities: Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON) Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity Lead staff with assessments and test/analysis data to document state of compliance with security requirements Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities Conduct periodic hardware/software inventory assessments Serve as organization spokesperson on advanced projects and programs Act as advisor to management and customers on advanced technical research studies Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements Additional Responsibilities: Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures Manage and perform security compliance continuous monitoring Oversee and participate in security assessments and audits Prepare, review, and present technical reports and briefings Identify root causes, prioritizes threats and recommends and/or implements corrective action Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices

Requirements

• 1+ years of combined experience and/or education in cybersecurity, IT, or a related field
• 1+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)
• This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)

Nice To Haves

• IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC)
• 1+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
• 1+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
• 1+ years of experience assessing and documenting test or analysis data to show cyber security compliance

Responsibilities

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
• Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
• Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity
• Lead staff with assessments and test/analysis data to document state of compliance with security requirements
• Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
• Conduct periodic hardware/software inventory assessments
• Serve as organization spokesperson on advanced projects and programs
• Act as advisor to management and customers on advanced technical research studies
• Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements
• Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
• Manage and perform security compliance continuous monitoring
• Oversee and participate in security assessments and audits
• Prepare, review, and present technical reports and briefings
• Identify root causes, prioritizes threats and recommends and/or implements corrective action
• Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices

Benefits

• At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent.
• Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.
• The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.
• The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees