Information Systems Security Officer (Special Programs)

The University of Texas at Austin•Austin, TX

1d•Onsite

About The Position

This role is responsible for managing security programs to meet ARL:UT’s Risk Management Framework (RMF) requirements for National Security computing environments. This includes adhering to standards set by NIST 800-Series, CNSSI, ICDs, and JSIG. The position involves assisting the Information Systems Security Manager (ISSM) in developing and maintaining RMF artifacts, enforcing standards, and ensuring compliance with JSIG requirements. The role provides IT support for government-owned systems, including installation, upgrades, maintenance, troubleshooting, and user support. It also involves account administration for systems within ARL closed areas, supply chain security, and inventory management. A key aspect is the development and maintenance of the Risk Management Framework (RMF) Body of Evidence (BoE), including System Security Plans (SSP), Security Controls Traceability Matrix (SCTM), and Plan of Actions and Milestones (POA&M). The position also entails conducting Information System audits and continuous monitoring to maintain compliance with sponsor assessments and JSIG.

Requirements

HS/GED
Three years information assurance experience in Windows/ Linux systems or related area.
Experience developing and implementing information assurance policy
Strong communication, critical thinking, and problem-solving skills with the ability to prioritize projects
Experience supporting various system configurations
Experience with auditing various OS and networks
Relevant education and experience may be substituted as appropriate.
U.S. citizenship.
Selected applicant is subject to government security investigation and must meet eligibility requirements for access to classified information at level appropriate to project requirements.
Employment is contingent on selected applicant submitting application for access and receiving notification of eligibility within a time period specified in the job offer.
Employment must begin within 30 days of confirmation of eligibility.
Eligibility for access to classified information must continue without interruption during employment.
Employment will be contingent on selected applicant obtaining a DoDM 8570.01 compliant certification, equivalent to IAT Level II within 6 months of start date.
Continued compliant certification, equivalent to IAT Level II is required during employment.

Nice To Haves

Bachelor's Degree: Computer Science, Information Systems Management, or related field.
Eligibility for immediate access to classified information at the level appropriate to the project requirements of the position.
Six years of experience in information assurance in a National Security computing environment.
Three years’ experience with the Risk Management Framework methodology.
Knowledge of Special Access and Sensitive Compartmented Information programs and government regulations.
Experience with policy creation and documentation preparation and maintenance.
Windows Operating System and Linux Operating System certifications.
Experience conducting security audits of information systems.
SIEM Tool Experience (ArcSight, Splunk, Wireshark, etc).
Experience with vulnerability scanning tools (ACAS/Nessus, Retina, MBSA, etc).
Possess a current DoDM 8570.01 compliant certification, equivalent to Information Assurance Technical (IAT) Level II (i.e. Security+).

Responsibilities

Provide support for IT government owned systems and system components to ensure that computer hardware and software, as well as networks and servers work consistently and correctly.
Install, upgrade, maintain, diagnose connectivity or system access issues, and provide direct support to users across the organization.
Troubleshoot system components including workstations, printers, video teleconference (VTC) equipment, and thin clients.
Serve as the technical POC for all government systems and accounts within special programs, taking lead on all technical issues and managing trouble tickets with the government sponsor.
Responsible for account administration for government owned systems that reside within ARL closed areas, including account requests, tracking, training requirements, and troubleshooting.
Responsible for supply chain security process and inventory of new equipment/hard drives.
Advise the information system owner regarding security considerations in the information system development life cycle.
Develop and maintain documentation for Assessment and Authorization (A&A) in accordance with applicable policies, procedures, and operating instructions to include System Security Plans (SSP), Security Controls Traceability Matrix (SCTM), and Plan of Actions and Milestones (POA&M).
Participate in risk assessments to evaluate the sensitivity of the system.
Participate in assessment of system safeguards and program elements.
Provide technical expertise and oversight to manage the daily administration of security protection measures on the information systems assigned.
Conduct Information System audits using approved auditing techniques/tools.
Responsible for the continuous monitoring of information systems in order to maintain compliance with the sponsor assessment and Joint Special Access Program (SAP) Implementation Guide (JSIG).
Perform other related duties as assigned.