Information System Security Officer (ISSO)[Top Secret Clearance w/ SCI and eligibility for SAP]

BLUE ORIGIN • Seattle, WA

22h

About The Position

As part of a small, passionate, and accomplished team of experts, you will be the primary point of contact for controlling access to Controlled Unclassified Information (CUI) and providing guidance to employees on proper handling procedures. You will provide assistance to define, create, and maintain the documentation for certification and accreditation of information systems in accordance with government requirements for Blue Origin. You will monitor information systems in order to identify potential security weaknesses, recommend improvements to mitigate vulnerabilities, implement changes, and document upgrades. You will also be required to assess the impacts on system modifications and stay up-to-date on technological advances. This position will directly impact the history of space exploration and will require your dedicated commitment and attention to detail to further the cause of safe and repeatable spaceflight. We are looking for someone to apply their technical expertise, leadership skills, and commitment to quality to positively impact safe human spaceflight. Passion for our mission and vision is required!

Requirements

• Requires a Bachelors Degree or equivalent experience in a technology related field and/or minimum of two (2) year’s experience in information assurance and/or IT.
• Acquire certifications specified in DoDM 8140.03 for IAM level 1 within 6 months.
• Must be highly organized, able to prioritize tasking as well as multi-task, and willing to work in a team environment.
• Strong critical thinking/analytical skills, attention to detail, creativity, and a sustained dedication to excellence and quality.
• The position requires excellent oral and written communication skills.
• Must be able to work flexible hours.
• Must hold an active Top Secret Clearance with SCI access and SAP eligibility (CI Poly will be required)

Nice To Haves

• Experience with developing and updating Authorization and Accreditation documentation and system authorization artifacts under the Risk Management Framework (CNSSI 1253/NIST 800-53, JSIG, etc.).
• Experience in the use of security related auditing tools in support of RMF requirements.
• Additional security certifications such as CISSP or specialized Information Security / Cybersecurity certifications.
• Previous ISSO and/or System Administration experience.
• Excellent proficiency with Microsoft Office software suite (Excel, Word, Powerpoint).
• Current SSBI (within five years), Top Secret Clearance with SCI (within two years), and a previously adjudicated CI Poly.

Responsibilities

• Manage Controlled Unclassified Information (CUI) access control process
• Work with Blue Origin Cybersecurity, Enterprise Technology, and Program Management to establish new CUI repositories with the appropriate protections and approvals
• Maintain the Blue Origin CUI training program and standard operating procedures
• Main contact for incidents involving CUI, collaborating with customer security teams and the Blue Origin Cybersecurity Operations Center to respond to incidents involving CUI
• Must be a self-starter and able to work independently
• Provide mentorship to employees on secure storage, use, and transmission of CUI
• Create/update A&A documentation for RMF, ensuring systems align with security plans.
• Enforce compliance with system maintenance, end-of-life tracking, patch management policies.
• Conduct information system continuous monitoring activities
• Support security planning, assessment, risk analysis, and risk management for customer systems and programs.
• Assist system engineers in the selection and application of security controls for the desired application or system capabilities.
• Participate in Engineering and Configuration Review Boards and Working Groups to develop secure system solutions.
• Work with the CPSO to ensure all users have the requisite security clearances, authorizations, need-to-know, and are aware of their security responsibilities before granting access to systems.
• Apply security-related software to detect malicious code, viruses, insider threats, and intruders (hackers) as needed.
• Familiarity with RMF, NIST SP 800-171, NISPOM, JSIG, and Information Assurance practices needed.
• Technical expertise in hardware/software security.
• Maintain awareness of organization-specific security and information technology policies.

Benefits

• Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
• Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
• Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion.
• Bonus amounts and eligibility are not guaranteed and subject to change and cancellation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level