Information System Security Officer

SpaceX•Hawthorne, CA

3h•$85,000 - $135,000•Onsite

About The Position

SpaceX is seeking a classified cyber assurance practitioner to drive the SpaceX classified cyber assurance program forward. The program focuses on three major areas: Assessment: Assessing the state of the classified cyber assurance program against industry standards, requirements (contractual and regulatory), and organizational needs. Governance: Managing and spearheading governance of the classified cyber assurance program to interpret and drive implementation of industry standards, requirements (contractual and regulatory), and organizational needs. Communications: Be "the face" of classified cyber assurance program to both internal and external stakeholders (e.g. customer, regulatory, government and supplier entities). The successful candidate will assist in driving the classified assurance team to ensure SpaceX delivers on customer requirements, reduces risk, and ensures mission success. We are a fast paced, multi-tasking, highly dynamic work environment with high degrees of autonomy and accountability.

Requirements

High school diploma or equivalency certificate
3+ years of experience managing cyber assurance for classified computer systems/networks IAW various risk management frameworks to include NIST 800-53, DAAPM, JSIG, and ICD 503
Must be able to work extended hours and/or weekends as needed
Ability to travel both locally and domestically
DoD IAM Level III eligibility based on active certifications
Counterintelligence (CI) scope polygraph (full-scope or lifestyle also acceptable), or ability to successfully complete
Active Top Secret clearance with SCI eligibility.
Must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State.

Nice To Haves

Demonstrated experience with NRO A&A processes and the JSIG A&A processes
Subject matter expertise in the RMF 7 step process
Experience working within highly technical and demanding teams and environments
Experience with obtaining ATO(s) for networks, weapon systems, and satellite systems
Demonstrated experience with COMSEC procedures and practices
Exceptional written and verbal communication skills
Exceptional organizational skills
Demonstrated project management skills, and continued track record of getting things done quickly with high quality
Demonstrated record for providing unique and/or novel solutions
Demonstrated record of integrating with I.T. and product security functions
Ability to perform within mission and time constrained environments
High comfort with and acceptance of performing individual contributor functions/tasks

Responsibilities

Responsible for the complete RMF A&A lifecycle process for assigned SpaceX classified information systems
Ensure compliance with existing regulatory, policy, and contractual requirements as they pertain to SpaceX classified information systems
Responsible for identification, triage, and implementation of new regulatory and contractual requirements into both broad and specific applications
Keep apprised of emerging community practices, risks, and threats
Plan, prepare for, schedule and coordinate audits, assessments, and tests
Identify, evaluate, and select various automation, assessment, and management tool sets to drive effectiveness and efficiencies
Provide expert knowledge of Nessus, Splunk and Security Center tools
Provide expert knowledge of Service Now (SNOW), eMASS, and other GRC tools
Guide and mentor Cleared Cyber Assurance Analyst(s)
Build and maintain positive relationships with internal stakeholders, contractual partners, and government customers
Successfully further SpaceX objectives and initiatives