Senior Information System Security Officer I

Rocket Lab Corporation•Long Beach, CA

4d•$110,000 - $136,000•Onsite

About The Position

The Senior Information System Security Officer (ISSO) is based onsite at Rocket Lab’s global headquarters in Long Beach, California. The role maintains the overall security posture of Rocket Lab classified information systems and is accountable for implementing the Risk Management Framework (RMF). The ISSO implements and maintains security controls, supports ongoing Authorization to Operate (ATO), and advises system owners and development teams on security. The position supports the ISSM, CPSO/FSO, and Government Program Security organization. The ISSO ensures classified systems meet cybersecurity requirements and government directives through system auditing, vulnerability risk assessment, assured file transfers, configuration management, data integrity controls, and investigation of security violations or incidents. The role also provides user cybersecurity education and technical and procedural information-system security expertise. The ISSO may take on System Administrator and ISSE responsibilities and assist in other security disciplines as program needs require. The role develops and maintains POA&Ms with system stakeholders, maintains systems according to their security plans and ATOs, manages and executes continuous monitoring, and ensures approved procedures are followed when sanitizing and releasing system components and media. Other security-related duties may be assigned or required by program needs. The selected candidate must work onsite at the listed location and may need to travel to support other locations or programs.

Requirements

Bachelor’s degree and 5+ years of experience, or an equivalent combination of education, certifications, professional training, or work experience totaling at least 9 years in cybersecurity.
Possess or be able to obtain a DoD 8140 IAM Level II security certification within 4 months of employment; examples include CISSP, CISM, or Security+ equivalent.
Experience with eMASS, NIST 800-53, and NIST 800-171 implementations.
Experience with cybersecurity tools such as Nessus and Splunk.
Active DoD Top Secret SCI clearance with a current SSBI, as required by program sponsors.
Ability to travel in support of other locations or programs when required.
Ability to work onsite at the listed location.

Nice To Haves

Experience collecting and preparing cybersecurity compliance artifacts for non-traditional IT systems, including space systems, flight software, and mission payloads.
Experience with AWS security services such as IAM, KMS, CloudTrail, and Security Hub, and with cloud security frameworks.
Experience developing and executing program protection strategies for existing and developing NISP, SAR, and/or SCI programs.
Ability to manage large projects or processes spanning beyond the immediate job area.
Strong interpersonal skills and ability to communicate and operate as a team member.

Responsibilities

Maintain the security posture of classified information systems and implement the Risk Management Framework.
Implement and maintain system security controls and support ongoing Authorization to Operate.
Advise system owners and development teams on security matters.
Ensure classified systems meet cybersecurity requirements and government directives through auditing, vulnerability risk assessments, assured file transfers, configuration management, data integrity controls, and investigations of security violations or incidents.
Provide cybersecurity education and training to system users and offer technical and procedural information-system security expertise.
Assume System Administrator and ISSE responsibilities as necessary and assist with other security disciplines as needed.
Develop, maintain, and update POA&Ms with system stakeholders, including identified weaknesses, mitigating actions, resources, and corrective-action timelines.
Maintain systems in accordance with security plans and ATOs, and manage, maintain, and execute continuous monitoring strategies.
Ensure approved procedures are used to sanitize and release system components and media.
Perform other security-related duties as assigned or required by program needs.

Benefits

Company stock as part of total compensation.
Employee Stock Purchase Program with a 15% discount on company stock.
Medical plans, including HMO, PPO, and a zero-cost HDHP option with a significant company HSA contribution.
Dental and vision coverage.
Paid vacation and sick time.
11 paid holidays.
Flexible spending and dependent care accounts.
Paid parental leave.
Disability and life insurance.
401(k) retirement plan with company match.
Subsidized EV charging.
Onsite fitness centers where available.
Discounted gym memberships.
Complimentary snacks and beverages.
50% employee discount on the company merchandise store.
Other employee discounts.