Senior Information System Security Officer I

Rocket Lab•Long Beach, CA

3d•Onsite

About The Position

Rocket Lab is hiring a Senior Information System Security Officer (ISSO) to maintain the security posture of its classified information systems and implement the Risk Management Framework (RMF). Based onsite at the company’s global headquarters in Long Beach, California, the ISSO implements and maintains security controls, supports ongoing Authorization to Operate (ATO), and advises system owners and development teams. The role supports the ISSM, CPSO/FSO, and Government Program Security organization. The ISSO ensures classified systems meet cybersecurity requirements and government directives through system audits, vulnerability risk assessments, assured file transfers, configuration management, data integrity controls, and investigations of security violations or incidents. The position also provides user security education and technical and procedural security expertise; may assume System Administrator and ISSE responsibilities; maintains POA&Ms and continuous monitoring; and ensures approved procedures are followed when sanitizing and releasing system components and media. Other security-related duties may be assigned based on program needs. The role requires onsite work at the listed location and may require travel to support other locations or programs. The position may involve prolonged sitting, standing, walking, and computer work, as well as occasional exposure to moderate noise, dust, and fumes in production areas. Compensation includes a base salary range of $110,000–$136,000 for California, with the level and base pay determined case by case. Company stock is also part of the total compensation package.

Requirements

Bachelor’s degree and at least 5 years of experience, or an equivalent combination of education, certifications, professional training, or work experience totaling at least 9 years in cybersecurity.
Possess or be able to obtain a DoD 8140 IAM Level II security certification within 4 months of employment; examples include CISSP, CISM, or Security+ equivalent.
Experience with eMASS and NIST 800-53 and NIST 800-171 implementations.
Experience with cyber tools such as Nessus and Splunk.
Active DoD Top Secret SCI clearance with a current SSBI, as required by program sponsor(s).
Ability to travel in support of other locations or programs when required.
Must work onsite at the listed location.
For U.S. office candidates, must meet ITAR-related U.S. person or authorization eligibility requirements described in the posting.

Nice To Haves

Experience collecting and preparing cybersecurity compliance artifacts for non-traditional IT systems, including space systems, flight software, and mission payloads.
Experience with AWS security services such as IAM, KMS, CloudTrail, and Security Hub, and with cloud security frameworks.
Experience developing and executing program protection strategies for existing and developing NISP, SAR, and/or SCI programs.
Ability to manage large projects or processes that span beyond the immediate job area.
Strong interpersonal skills and the ability to communicate and operate as a team member.

Responsibilities

Maintain the overall security posture of Rocket Lab classified information systems and implement the Risk Management Framework (RMF).
Implement and maintain security controls for systems and support ongoing Authorization to Operate (ATO).
Serve as a security advisor to system owners and development teams; support the ISSM, CPSO/FSO, and Government Program Security organization.
Ensure classified information systems meet cybersecurity requirements and government directives by performing system audits, vulnerability risk assessments, assured file transfers, hardware and software configuration management, data integrity control implementation, and investigations of security violations or incidents.
Provide cybersecurity education and training to system users and technical and procedural information system security expertise as needed.
Assume System Administrator and ISSE responsibilities as necessary and assist in other security disciplines as needed to support the program.
Develop, maintain, and update POA&Ms with system stakeholders, identifying system weaknesses, mitigating actions, resources, and corrective-action timelines based on assessment findings.
Maintain systems in accordance with the security plan and ATO, and manage, maintain, and execute the continuous monitoring strategy.
Ensure approved procedures are used to sanitize and release system components and media.
Perform other security-related duties as assigned or required by program needs.

Benefits

Company stock as part of total compensation.
Employee Stock Purchase Program with a 15% discount on company stock.
Medical plans, including HMO, PPO, and a zero-cost HDHP option with a company HSA contribution.
Dental and vision coverage.
Paid vacation and sick time.
11 paid holidays.
Flexible spending and dependent care accounts.
Paid parental leave.
Disability and life insurance.
401(k) retirement plan with company match.
Subsidized EV charging.
Onsite fitness centers where available.
Discounted gym memberships.
Complimentary snacks and beverages.
50% employee discount on the company merchandise store.
Additional employee discounts.