Cybersecurity - Information System Security Officer (ISSO) Sign on Bonus Potential

Boeing•Berkeley, MO

8d•$105,400 - $142,600•Hybrid

About The Position

Boeing Classified Cybersecurity is seeking a highly motivated Cybersecurity – Information System Security Officer (ISSO) to join their team. The selected candidate will leverage their Cybersecurity and Information Assurance (IA) background to be a technical leader supporting Enterprise activities and Boeing customers across multiple classified computing domains. The ISSO is responsible for maintaining and implementing all Information System Security policies, standards, and directives to ensure the assessment and authorization of information systems processing classified information. Limited telecommuting opportunities may be available. This role directly supports Air Dominance (AD) programs and is contingent upon award.

Requirements

Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years
IAM Level 1 DoD 8140.03 (previously 8570.01) compliant certification (i.e. , Security+ CE, CAP, CISSP, CASP, CISM, GSLC)
3+ years of combined experience and/or education in cybersecurity, IT, or a related field
3+ years of experience with the Risk Management Framework (RMF), cybersecurity policies, and RMF implementation (e.g., DAAG, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series)
3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
Must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.
Requires an active U.S. Top Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)

Nice To Haves

Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC or CISM)
3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
3+ years of experience assessing and documenting test or analysis data to show cyber security compliance

Responsibilities

Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems
Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity
Lead staff with assessments and test/analysis data to document state of compliance with security requirements
Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
Conduct periodic hardware/software inventory assessments
Serve as organization spokesperson on advanced projects and programs
Act as advisor to management and customers on advanced technical research studies
Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements
Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
Manage and perform security compliance continuous monitoring
Oversee and participate in security assessments and audits
Prepare, review, and present technical reports and briefings
Identify root causes, prioritizes threats and recommends and/or implements corrective action
Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices