Principal, Cyber Intelligence

L3HHCM20•Huntsville, AL

2d•Onsite

About The Position

The Missile Solutions Segment Security Organization has an opportunity for a Principal, Cyber Intelligence to lead the development, maintenance, and sustainment of cybersecurity initiatives supporting collateral classified and special access program systems across the segment footprint. The ideal candidate will maintain strong government relationships, independently lead Approval to Operate (ATO) strategy, identify and assess risk, prioritize remediation efforts, and drive issues to closure across a multi-program, multi-site environment.

Requirements

Bachelor’s Degree with a minimum of 12 years of experience.
Graduate Degree with a minimum of 10 years of prior related experience.
Active US Top Secret clearance

Nice To Haves

10+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
10+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.
10+ years of experience cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.
10+ years of experience communicating complex technical risks, translating impact, and advising senior leaders.
Existing customer Authorizing Official – DIB peer relationships
SAP and or SCI information system management are desired.
Participation in national industrial security associations and working groups.
In-depth knowledge with the Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs)
Experience with NIST 800-53 Security Controls, ICD 503, and JSIG requirements/programs
Experience with Windows 7/10, Windows Server 2008/2012/2016, Active Directory, Group Policy, VMWare, Nutanix, and Citrix and cloud based security desired.
Technical knowledge of Linux, and UNIX based platforms desired

Responsibilities

Represent the organization during customer assessments, authorization reviews, audits, and other government engagements
May be appointed as ISSM for complex classified information systems.
Ensure coordination of information security initiatives with internal stakeholders, including Security, Information Technology, and Cyber Engineering, as well as external partners such as the DIB SCC, DSIE and information-sharing working groups, the DoD DIB CS/IA Program, and DCSA, to enable timely receipt of critical threat information and the development of cost-effective solutions to protect the corporation’s classified, controlled unclassified, and proprietary information.
Engage with our team of Cyber Security professionals and identify the right mix of tools and techniques to create scalable, secure and effective cyber security solutions.
Perform duties as subject matter expert to address requirements listed in the Joint Special Access Program (SAP) Implementation Guide (JSIG); 32 Code of Federal Regulation Part 117, National Industrial Security Program Operating Manual (NISPOM); Intelligence Community Directives (ICD); and the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM).
Identify training needs and develop curriculum to address gaps and create common skills by level.
Develop and publish information assurance policies for the Segment supporting alignment with corporate initiatives
Develop and review System Security Plans (SSP), all required supporting documentation/artifacts (POA&M, NSP, etc.), and local policies in accordance with the JSIG, NISPOM, ICD, and DCSA DAAPM.
Develop Cyber Security strategies and plans designed to protect Cloud based architecture and the use of Artificial Intelligence software.
Chair Information Security Working Groups at the Segment level
Drive process standardization across the segment.
Develop risk-based metrics and continuous monitoring strategies to measure health and effectiveness of the information assurance program
Examine the effect of government policy directives and identify corrective actions.
Develop scalable solutions for efficient management of Risk Management Framework (RMF) activities.
Perform periodic self-inspections, tests, and reviews of the Information Security program to ensure that systems are operating as authorized/accredited and implement corrective actions for any identified findings and vulnerabilities.
Develop and conduct test procedures for verification of RMF controls to meet customer requirements
Coordinate with Facility Security Officers (FSOs) and Contractor Program Security Officers (CPSOs) to define, implement and maintain information security policies, strategies, and procedures
Create and conduct Information System Security briefings
Ability to travel to offsite locations as required