Information Systems Security Officer (ISSO)

General Dynamics Mission Systems, Inc•Pittsfield, MA

5d•$101,357 - $109,662

About The Position

At General Dynamics Mission Systems, we create the technologies, products and services that help our nation’s heroes keep our nation safe. The work we do is so advanced, we are continuously moving the boundaries of what’s possible. Here you’ll work with the best and your talent will be front and center on projects that impact the world. Are you up to the challenge? We apply advanced technologies such as Artificial Intelligence, Blockchain, AR/VR, Cloud Native and Quantum Physics to solve our customers’ missions in cyber, RF, undersea, interstellar and everything in between. As an Information Systems Security Officer (ISSO) for classified systems at General Dynamics Mission Systems, you will ensure the security and integrity of classified information systems. You will work closely with cross-functional teams to implement and maintain robust security measures. In this role, you will develop, implement, and maintain security policies and procedures, conduct risk assessments, and manage security-related documentation. You will monitor and evaluate system compliance with security requirements, provide guidance on information security best practices, and ensure adherence to government and industry standards. Additionally, you will perform security audits, manage incident response activities, and collaborate with other security professionals to address and mitigate security risks. This role requires excellent problem-solving skills, attention to detail, and the ability to work effectively in a collaborative team environment. Are you ready to make a difference?

Requirements

Master's degree, plus a minimum of 3 years of relevant experience. Bachelor's degree in a related specialized area or equivalent relevant experience is required, plus a minimum of 5 years of relevant experience.
Ability to obtain a Department of Defense Top Secret security clearance is required at time of hire.
Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
Due to the nature of work performed within our facilities, U.S. citizenship is required.
Experience developing System Security Plans (SSP) and all supporting Assessment and Authorization documentation such as Security Assessment Reports, SCTM’s and POA&M’s.
Experience with eMASS and Service NOW (SNOW) risk management and compliance automation tools.
Experience with various system security assessment/hardening tools - SCAP Compliance Checker, STIG Viewer, ACAS/Nessus, etc.
Trained and proficient in Assured File Transfer (AFT) procedures.
Self-starter with the ability to operate independently with minimal supervision.
Department of Defense Top Secret clearance required at time of hire and Top Secret obtainable within a reasonable time frame based on requirements.

Nice To Haves

Outstanding communications skills.
Ability to work collaboratively in a cross-functional team throughout the system life cycle.
DoD 8570 or 8140 Certification meeting IAM Level II (e.g., CISSP, CAP, etc.).
Demonstrated comprehensive knowledge of the NISPOM-DAAPM, NIST SP 800-53, and NIST 800-171.

Responsibilities

Ensure the security and integrity of classified information systems.
Work closely with cross-functional teams to implement and maintain robust security measures.
Develop, implement, and maintain security policies and procedures.
Conduct risk assessments.
Manage security-related documentation.
Monitor and evaluate system compliance with security requirements.
Provide guidance on information security best practices.
Ensure adherence to government and industry standards.
Perform security audits.
Manage incident response activities.
Collaborate with other security professionals to address and mitigate security risks.
Execute or support the execution of A&A activities, including development of required security documentation, including items such as System Security Plans, Security Assessment Reports, SCTM’s and POA&M’s.
Perform weekly system audit reviews, media reviews, hardware/software configuration management.
Execute security testing and evaluation to ensure correct implementation of security controls.
Support the assessment and mitigation of vulnerabilities throughout a systems life cycle.
Conduct IA security education training for all system users on appropriate risk mitigation strategies.
Perform incident response and cleanup actions, when necessary, per company or customer directions.
Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and procedures outlined in the System Security Plan (SSP).