Information System Security Officer (ISSO) - Millennium Space Systems

Boeing•El Segundo, CA

1d•$38 - $56

About The Position

As an Information Systems Security Officer (ISSO) at Millennium Space Systems, you ensure that the classified and controlled systems Millennium is responsible for comply with all customer-defined security requirements and applicable federal regulations.

Requirements

2 years of experience within the IT and/or InfoSec industry
Certification(s) and experience commensurate with Information Assurance Manager Level I (IAM Level I) as specified by DoDD 8140
Experience in classified environments (e.g.: Collateral, SCI, SAP)
Working knowledge of the Risk Management Framework as provided by NIST Special Publication (SP) 800-37, controls provided in NIST SP 800-53, and assessments provided by NIST SP 800-53A and derived policies, such as the Intelligence Community Directive Number 503 (ICD-503) or the Joint Special Access Program (SAP) Implementation Guide (JSIG)
Working knowledge and experience with completing and submitting accreditation or assessment and authorization packages
Ability to audit and verify security controls as part of industry standard system hardening or in accordance with customer or government requirements
Ability to communicate complex concepts with senior management, technical personnel, and external entities including senior representatives of the US Government and teammates
Ability to audit, scan for vulnerabilities, and continuously monitor mixed computer system environments using vulnerability scanners, SIEMs, and various scripting languages
This position requires an active U.S. Top Secret Security Clearance (U.S. citizenship required).

Nice To Haves

Ability to participate in or manage Computer Incident Response Team (CIRT) activities, including computer forensic analysis
Ability to analyze network traffic using common security devices such as wireshark, tcpdump, firewalls, and intrusion detection systems

Responsibilities

Perform daily and weekly information assurance activities, such as auditing, and working with the IT team to patch classified systems with the goal of maintaining all systems in compliance with corporate and government directives, regulations, and policies
Create new and manage existing assessment and authorization packages and perform all tasks necessary to obtain and maintain authorization to operate (ATO). This includes items such as the implementation of security controls, writing procedures for, and conducting certification testing, facilitating third party certification and penetration testing, addressing plan of action and milestones (POA&M) items, and continuous monitoring activities
Ensure system authorization packages take into consideration the requirements of government agencies and the owner/users of the systems such as program managers, system engineers, and developers
Design and implement technical security controls for new and existing systems
Participate in or lead planning and executing risk management activities such as disaster recovery, continuity of operations, and incident response
Participate in or lead computer forensic activities such as using tools and techniques for attack reconstruction, root cause analysis, and providing solutions/recommendations