Senior Information System Security Officer (ISSO) - Andover, MA

RTX•Andover, MA

7d•$95,500 - $181,700•Onsite

About The Position

RTX’s cybersecurity team is seeking a Senior Information Systems Security Officer (ISSO) to support its facility in Andover, Massachusetts, working 100% onsite. The role interfaces with the Information Systems Security Manager (ISSM) to help ensure adherence to NIST Special Publications, customer directives, company policies, NISPOM Chapter 8, DAAPM, and JSIG policies. The successful candidate will assess and monitor system compliance, conduct audits and technical and administrative assessments, develop security plans, deliver information systems security education and awareness, investigate security violations, review configuration management requests within their authority, integrate cybersecurity processes and tools, and support cybersecurity documentation and technical writing. An active, transferable U.S. government Secret security clearance is required before starting and must be active on the first day. U.S. citizenship is required. Candidates who do not already hold an appropriate security certification must obtain and maintain one commensurate with IAM Level I, such as Security+, within six months of hire.

Requirements

Typically, a university degree or equivalent experience and at least 5 years of relevant experience, or an advanced degree in a related field and at least 3 years of experience.
An active and transferable U.S. government-issued Secret security clearance, active and existing on the first day of work.
U.S. citizenship, as required for security clearance eligibility.
If not already held, obtain and maintain a security professional certification commensurate with IAM Level I, such as Security+, within six months of hire.
Relevant experience may include cybersecurity, systems security, or hardening; information technology; compliance auditing using RMF, DAAPM, JSIG, NISPOM, or listed non-defense standards; computer technologies; physical security or investigations; or project/program, office, senior administrative, or account management.

Nice To Haves

Experience in DoD classified operating or laboratory environments.
Experience with information system security tools for vulnerability analysis and mitigation, such as Splunk, Forcepoint, Ivanti, Tenable, ACAS, or HBSS.
Familiarity with implementing government directives and policies based on NIST, CNSSI, DoD, or other government regulatory compliance standards.
Experience executing Assessment and Authorization processes under the Risk Management Framework.
Experience providing technical security consultation for complex, cross-domain, heterogeneous classified network environments in collaboration with customers and IT.
Familiarity with large, multi-facility networks and complex components, including Windows and Linux environments.
Experience interpreting, implementing, and assessing DISA STIGs.
Familiarity with managing cyber incident response, including preservation, containment, and eradication.

Responsibilities

Assess and monitor information system compliance.
Conduct audits and develop security plans.
Deliver information systems security education and awareness.
Investigate information system security violations and help prepare reports describing corrective and preventative actions.
Review and approve configuration management requests within the role’s authority.
Conduct technical and administrative assessments.
Integrate new cybersecurity processes, procedures, and tools.
Support the creation, review, and updating of cybersecurity documentation and other technical writing.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays
Potential eligibility for annual short-term and/or long-term incentive compensation programs