Senior Industrial Security Specialist/COMSEC Officer - CTJ - TS/SCI

Microsoft•Reston, VA

About The Position

We are seeking an experienced Sr Industrial Security Specialist/COMSEC Officer to join our National Security Team in Reston, VA. If you have expertise in managing National Industrial Security Programs in accordance with CFR 32 Part 117, and a working knowledge of Intelligence Community guidelines, we encourage you to apply for this exciting opportunity. Microsoft’s mission is to empower every person and organization on the planet to achieve more. Our culture is built around a growth mindset that inspires excellence, fosters innovation, and encourages individuals and teams to bring their best every day. By embracing this mindset, we make customer-first decisions that lead to life-changing innovations impacting billions worldwide. We live our values of respect, integrity, and accountability, fostering a culture of inclusion where every individual can thrive—both at work and beyond. You can be part of this transformative journey. As a proud Defense Industrial Base (DIB) and Cloud Service Provider (CSP), Microsoft plays a vital role in serving the federal government. Protecting our nation’s security and preserving national interests are vital to the safety and prosperity of the United States, and in this role, you’ll be part of ensuring that critical functions operate effectively and securely. If you have demonstrated leadership in supporting the Department of Defense and the Intelligence Community, we invite you to apply for a key role in our National Security Team (NST). NST is responsible for overseeing the company’s industrial security program, enabling all U.S. Federal Government work.

Requirements

4+ years experience in security program or program management or related field
OR equivalent experience.
Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
The successful candidate must have an active U.S. Government Top Secret/SCI Security Clearance. Ability to meet Microsoft, customer and/or government security screening requirements are required pre-offer and post-hire for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.
Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

Regulatory Knowledge: Demonstrated expertise in industrial security policies and regulations, including Intelligence Community Directives (ICD), NISPOM (32 CFR Part 117), and DoD Directives.
Experience with analysis and evaluation of both hardware and software in support of Intelligence Community (IC), Department of Defense, and other Federal Government Agencies.
Government Systems: Proficient in using government security systems, including Defense Information System for Security (DISS), National Background Investigation Services (NBIS), and Scattered Castles. Experience applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resultant security risk analysis.
COMSEC Knowledge: Understanding and experience with government COMSEC requirements and protocols. Managing COMSEC, keying devices, lifecycle planning.
Leadership Experience: Proven experience working with senior government officials and corporate executives.
Cultural Fit: Passionate and aligned with the company’s culture and values.
Operational Security: Develop, create, implement, and support physical and operations security (OpSec) policies, plans, processes and training material that position the FSO and offices to operate in a manner that is compliant with relevant U.S. Government (and/or other unique
Experience applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resultant security risk analysis.
Experience or knowledge of secure are construction in accordance with ICD 705 requirements.
Bachelor’s degree and 8+ years of experience in security, security program management, security process implementation, process improvement, or equivalent experience.
Security Clearance: Active U.S. Government Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility and FSP polygraph (or equivalent).
Regulatory Knowledge: Extensive experience with industrial security policies, including ICDs, NISPOM (32 CFR Part 117), and DoD Directives..

Responsibilities

Self-Motivation & Problem-Solving: Demonstrate ability to solve complex problems independently and proactively, with a passion for continuous improvement.
Time Management & Independence: Effectively manage time, prioritize tasks, and work independently to meet deadlines.
Decision Making: Make informed decisions that enhance the security program and foster strong relationships with internal and external stakeholders.
Attention to Detail: Maintain a high standard of organization, punctuality, and attention to detail in all tasks.
Core Values: Exhibit integrity, flexibility, adaptability, and a growth mindset in all aspects of the role.
Collaboration: Work closely with internal teams such as Insider Threat & Counterintelligence, Personnel Security, Information Systems Security, and Legal to drive the success and integrity of NST’s industrial security program.
Regulatory Compliance: Engage with Government Security authorities to ensure compliance with regulations and directives, including CFR 32 Part 117, ICDs, DoDM 5105.21, and DoDM 5205.07.
Training: Conduct Security Education and Training (SETA) sessions to ensure all personnel are well-versed in security protocols.
Customer Engagement: Serve as a liaison between internal and external customers or government officials in the performance of security duties.
Accreditation: Maintain ICD705 accreditations in accordance with the guidelines set by the Cognizant Security Agency.
Security Violations: Investigate security violations, report findings, and submit required documentation to the Cognizant Security Agency.
Business Relationships: Develop and maintain business relationships across the organization, gaining company-specific insights in a collaborative, cross-functional environment.
Physical Security: Ensure secure work area (SWA) physical security, including visitor control, access control, and entry/exit inspections.
Standard Operating Procedures: Prepare and annually update SOPs/EAPs for DoD and IC customers.
Compliance Program Development: Design and maintain a compliant security program in line with 32 CFR Part 117 and IC directives, ensuring the protection of classified material.
Regulatory Rulings: Obtain rulings, interpretations, and deviations for compliance with regulations from relevant government agencies.
Business Impact Projects: Lead NST-driven initiatives that not only advance national security but also drive strategic business outcomes through innovative security solutions.
Audit Participation: Actively engage in Government security audits and maintain records of audit results.