Cyber Security, Senior Information Systems Secutiry Office (ISSO)

BAE Systems•Nashua, NH

7d•$97,008 - $164,914•Onsite

About The Position

BAE Systems is hiring a Senior Information Systems Security Officer to support and protect information systems critical to national security within its Aerospace & Mission Systems organization. The role supports compliance with the Risk Management Framework (RMF) and applicable requirements, including NISPOM/DAAG, JSIG, ICD 503, STIGs, and associated NIST publications. The ISSO supports the Information System Security Manager in obtaining and maintaining Authority to Operate approvals for assigned programs. This includes developing and managing system security documentation and POA&Ms, assessing and auditing security controls, and conducting continuous monitoring. The position is full-time and 100% onsite at a BAE Systems facility.

Requirements

IAM Level I certification, such as Security+ or equivalent, in accordance with DoD 8570.1M / 8140.03 requirements, or ability to obtain certification within six months.
ISSO or relevant cyber security experience.
High personal motivation and initiative to learn and acquire new skills, and ability to adapt to a changing security environment.
Customer-focused, excellent communication skills, and ability to work with limited supervision.
Strong organizational skills.
Ability to interface with cyber security team members, other security disciplines, program personnel, and government security representatives.
Experience validating compliance of systems including Windows, Linux, network devices, and peripherals.
Experience with cyber security configuration management and change request processes.
Experience conducting regular audits to ensure secure system operation and implementation of security policies and procedures.

Nice To Haves

Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
Experience reviewing and creating mitigation reports from compliance and vulnerability scanning tools such as Nessus, SCAP, Evaluate-STIG, ACAS, and STIG Viewer.
Experience preparing for Assessment and Authorization activities.
Experience developing System Security Plans, Standard Operating Procedures, POA&Ms, Remediation Plans, and Configuration Management Plans.
Experience developing and delivering cyber security briefings and training material.
Experience conducting investigations of information systems security violations and incidents and reporting findings to management.
Ability to translate operational requirements into technical requirements and architectures to meet program objectives.
Experience conducting all aspects of self-inspections.
Experience conducting periodic and on-demand system audits and vulnerability assessments, including user account, application access, file system, and integrity scans.
Experience preparing incident reports describing analysis methodology and results.
Knowledge of new and emerging information technology and cyber security technologies.

Responsibilities

Support adherence to RMF compliance requirements, including NISPOM/DAAG, JSIG, ICD 503, STIGs, and associated NIST publications.
Support the ISSM in obtaining and maintaining Authority to Operate approvals for assigned systems and programs.
Develop and manage system security documentation and Plans of Action and Milestones.
Assess and audit system security controls and conduct continuous monitoring.
Support the ISSM in keeping certification and accreditation documentation for classified systems up to date.
Ensure continuous monitoring activities are implemented and meet cognizant security authority requirements.
Validate compliance across Windows, Linux, network devices, and peripherals.
Conduct regular audits to verify secure system operation and implementation of security policies and procedures.
Support cyber security efforts throughout the RMF process for assigned programs.