SCIF Manager

Leidos•Valparaiso, FL

2d•$69,550 - $125,725

About The Position

Leidos is looking for a SCIF Manager with a TS clearance. Contractor Special Security Representative (CSSR) will support the Joint Assessment Division (JAD) SCIF located at Eglin AFB, Florida. Prospective employees must be able to ensure the facility, operations, and procedures are consistent with the Intelligence Community (IC) technical specifications for SCIF management, implementing Intelligence Community Directive (ICD) 705 and DoDM 5105.21-Volumes 1,2,3 (SCI Administrative Security Manuals), Joint Staff guidance, and other applicable instructions, manuals, or local SCIF compliance requirements. The employee must be able to ensure compliance and coordination with the Air Force Life Cycle Management Center Intelligence Division Special Security Office (AFLCMC/INM SSO) at Eglin AFB, FL. Will be required to perform day-to-day SCIF and emergency response operations and ensure compliance in the following areas (at collateral, compartmented and/or special access program classification levels): SCIF Security Management; SCIF SOP development; program compliance/inspections; controlled area procedures (forms and documentation); Intrusion Detection System (IDS) and alarm support coordination (securing, sensors, activations, deactivations, response, malfunctions, inspections, tests, servicing); Emergency Response Plan; Special Reports; Visitor Access; Events/Meetings/Conference coordination; Badge/Access Control; Checklists; SCI indoctrination coordination; equipment accountability; incident reporting; storage, reproduction, and destruction procedures; courier procedures and transmission of classified; and SCIF security training. Primary Responsibilities Manage compliance of SCIF Advise government customer during construction of the SCIF Identify alternative information security strategies to address organizational security objective Track audit findings and recommendations to ensure that appropriate mitigation actions are taken Collect and maintain data needed to meet SCIF security reporting. Ensure that security improvement actions are evaluated, validated, and implemented as required. Ensure that inspections, tests, and reviews are coordinated for the applicable environment. Ensure that requirements are integrated into the continuity planning for that system and/or organization(s). Participate in security risk assessment during construction and post construction phases. Evaluate threats and vulnerability to information systems to ascertain the need for additional safeguards Author, Review and Approve information system security assessment plans, with applicable procedures. Prepare the final Security Assessment Report (SAR) which includes assessment results and findings, at the conclusion of each security assessment activity. Initiate a POA&M with identified weakness and suspense dates for each weakness discovered. Provide purposeful security architecting, design, development, and configuration of SCIF. Employ best practices when implementing security requirements for SCIF including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure cloud techniques. Maintain JAD security related documentation —e.g., security compliance assessment protocol, configuration management policy and plan, incident response/contingency policy, system/service acquisition, security assessment/authorization plan

Requirements

This position requires a minimum of 5 years of experience of which 3 years must be specialized.
Bachelor of Science degree may substitute for two years’ experience.
Secret Clearance and ability to obtain and maintain TS Clearance
SCIF SSR will be required to get specific Information Assurance IAT Level 2 experience and certifications IAW DoD Instruction 8570.01(series) within 6 months of assignment.
SCIF SSR will be required to obtain/maintain specialized training IAW DoDM 5105.21V1, Joint Staff Instruction 5225.01, National Counterintelligence and Security Center Technical Specifications for ICD/ICS 705, Center for Development of Security Excellence (CDSE), and local base requirements as required.
Capability to lift 40 lbs.
Professional writing and oral presentation skills, MS Office proficiency

Nice To Haves

TS Clearance
Prior experience with SCIF development/management
Come break things (in a good way). Then build them smarter. We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

Responsibilities

Manage compliance of SCIF
Advise government customer during construction of the SCIF
Identify alternative information security strategies to address organizational security objective
Track audit findings and recommendations to ensure that appropriate mitigation actions are taken
Collect and maintain data needed to meet SCIF security reporting.
Ensure that security improvement actions are evaluated, validated, and implemented as required.
Ensure that inspections, tests, and reviews are coordinated for the applicable environment.
Ensure that requirements are integrated into the continuity planning for that system and/or organization(s).
Participate in security risk assessment during construction and post construction phases.
Evaluate threats and vulnerability to information systems to ascertain the need for additional safeguards
Author, Review and Approve information system security assessment plans, with applicable procedures.
Prepare the final Security Assessment Report (SAR) which includes assessment results and findings, at the conclusion of each security assessment activity.
Initiate a POA&M with identified weakness and suspense dates for each weakness discovered.
Provide purposeful security architecting, design, development, and configuration of SCIF.
Employ best practices when implementing security requirements for SCIF including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure cloud techniques.
Maintain JAD security related documentation —e.g., security compliance assessment protocol, configuration management policy and plan, incident response/contingency policy, system/service acquisition, security assessment/authorization plan