Cleared Senior/Principal Cyber Information System Security Officer (ISSO), Onsite

Sandia Corporation; Albuquerque (NM); On-site; USD 102,000 - 200,000; Full time

Benefits offered by this job

Flexible work arrangements (9/80, 4/10

Telecommuting options

Relocation assistance

Generous vacation

Job summary

Sandia National Laboratories seeks an Information Assurance Specialist (ISSO) to join a dynamic cyber security team. You will manage security plans, assess configurations, and ensure compliance with RMF/JSIG guidelines for multiple systems.

Travel may be required to support training and customer engagement. The role requires you to obtain and maintain a DOE Q clearance or equivalent, with polygraph eligibility.

Qualifications

• Bachelors degree in MIS, Information Assurance, CS or related field plus five+ years of cyber/IT experience.
• Experience with RMF, JSIG, and/or NIST 800-53 security controls.
• ISSO/ISSE/ISSM experience in government or government contractor cyber programs.
• Active CISSP or ability to obtain within 9 months; ISC2 Associate option available.
• DOE Q or DOD TS clearance to start and SCI with polygraph potential.

Responsibilities

• Ensure operational security posture for assigned information systems portfolio.
• Ensure systems are operated, maintained, and disposed of per security policies in authorization package.
• Develop and maintain System Security Plans (SSP).
• Manage changes to system configurations and assess security impact of changes.
• Conduct periodic reviews for compliance with security controls.
• Collaborate with DoE/DoD and IC partners to enable programs securely.

Education

Bachelors degree in Management Information Systems, Information Assurance, Computer Science or relevant discipline

Tools

Splunk

ACAS

Nessus

Security Center

HBSS

Job description

Location: Albuquerque, NM

Contract: Full-Time, Regular

About Sandia

Sandia National Laboratories is the nation's premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide


• Extraordinary co-workers


• Some of the best tools, equipment, and research facilities in the world


• Career advancement and enrichment opportunities


• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)


• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

What Your Job Will Be Like

We are seeking a highly motivated and driven Information Assurance Specialist to join our dynamic team.

On any given day, you may be called on to:

• Ensure appropriate operational security posture is maintained for a given portfolio of information systems.


• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package.


• Develop and maintain System Security Plans (SSP).


• Manage and control changes to system configurations and assess the security impact of those changes.


• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.


• Determine security requirement gaps and provide recommendations or mitigations for addressing the gaps.


• Process security related tasks associated with SSP.

This individual will be assigned the role of Information System Security Officer (ISSO) for multiple information systems, configure and maintain cybersecurity tools, and will work closely with our Information Systems Security Manager (ISSM), other Information Systems Security Officers (ISSOs), other Information Systems Security Engineers (ISSE), and system administrators to provide interpretation and implementation of NIST/JSIG requirements and guidelines along with validation testing. The selected individual will also collaborate with external entities including the Department of Defense and Intelligence Community agencies to securely enable new and emerging programs and maintain existing programs.

Due to the nature of the work, this candidate must be able to work onsite and have the ability to travel for job related trainings, work duties, and customer engagement, as needed.

Salary Range

$102,400 - $199,700

*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.

Qualifications We Require

• Bachelors degree in Management Information Systems, Information Assurance, Computer Science or relevant discipline plus five (5) years or more of directly related cyber or IT experience.
  
  
  
  • Or equivalent combination of relevant education and experience.
  
  
  
  


• Experience with the Risk Management Framework (RMF), the Joint Special Access Program Implementation Guide (JSIG), and/or NIST 800-53 security controls.


• Experience as an Information System Security Officer ISSO, ISSE, or ISSM.


• Experience working in a US Government or government contractor cyber security program.


• Active Certified Information System Security Professional (CISSP) or ability to obtain a CISSP certification within the first 9 months of employment. Selected individual may pursue an Associate of ISC2, in the event that additional professional experience is needed.


• Active DOE Q or DOD TS clearance is required to start, plus the ability to obtain and maintain a SCI which may include a polygraph examination.

Qualifications We Desire

• Ability to apply cyber security standards, directives, guidance, and policies to an architectural framework.


• Experience working with continuous monitoring tools (i.e. Splunk, ACAS, Nessus, Security Center, HBSS).


• System administration experience, to include a detailed understanding of common operating systems (e.g. Windows and Linux) and networking architecture.


• Excellent written, verbal, and interpersonal communication skills.


• Demonstrated commitment to ongoing growth and professional development.

About Our Team

The FIE Cyber Security Operations Department supports the Field Intelligence Element/High Security Operations mission by delivering capabilities around information system hardening/accreditation, vulnerability assessment, risk management and analysis with a particular focus on mitigating cyber threats. The cybersecurity staff, consisting of Information Systems Security Managers (ISSMs), Information Systems Security Officers (ISSOs), and Information Systems Security Engineers (ISSEs), provide effective technical solutions for DOE, DoD and the Intelligence Community.

Posting Duration

This posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.

Security Clearance

Position requires a Department of Energy (DOE) Q security clearance to start, or equivalent active security clearance with another U.S. government agency (e.g., DOD). Sandia is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to maintain a DOE Q-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

EEO

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

NNSA Requirements for MedPEDs

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.