Cyber Security Manager Special Programs

MIT Lincoln Laboratory; Lexington (MA); Hybrid; USD 152,000 - 205,000; Full time

Benefits offered by this job

Health plans

MIT-funded pension

Matching 401K

Paid leave

Tuition reimbursement

Job summary

MIT Lincoln Laboratory seeks a Cybersecurity Manager (Special Programs) in Lexington, MA, to lead the Security Services cybersecurity program and supervise ISSMs/ISSOs in support of a major research sponsor.

You will oversee SSP development, RMF/JSIG compliance, risk management, and security audits across Windows, Linux, UNIX, and virtualization environments, while mentoring staff and coordinating with stakeholders.

Qualifications

• Bachelor’s degree in computer science, IT, or related discipline with 10+ years in information security.
• Minimum 7 years’ leadership/supervisory experience in DoD or Industrial Security.
• Strong knowledge of RMF, JSIG, ICD 503, NIST SP 800-53 and related publications.

Responsibilities

• Lead, manage, and direct the Special Programs cybersecurity program.
• Oversee RMF/JSIG/ICD-503 adherence and security policy implementation.
• Supervise ISSMs/ISSOs; ensure SSPs are developed and reviewed.
• Oversee security audits, POA&Ms, and remediation actions.
• Ensure configuration management and continuous monitoring policies.
• Provide cybersecurity education, training, and staff development.
• Recruit, interview, and manage personnel and staffing.

Skills

Security leadership

RMF compliance

NIST SP 800-53

JSIG/ICD-503

Windows/Linux/Solaris

Network security

Cross-functional communication

DoD/Industrial Security

Education

Bachelor's degree in Computer Science / Information Technology / Computer Information Systems or related discipline

Tools

ESXi

Linux

Windows Server

Solaris

Job description

Select how often (in days) to receive an alert: JOIN OUR TALENT NETWORK

The Security Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.

We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Department encourages flexible schedules and hybrid remote work arrangements.

Who are we?

MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

The Security Services Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.
We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opporunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Services Department encourages flexible schedules and hybrid remote work arrangements.

What will you do?

he Cybersecurity Manager (Special Programs) reports to the Security Services Department Deputy Chief Information Security Officer (DCISO) and serves as the primary focal point and supervisor for a team of Information System Security Managers (ISSMs) and Information Systems Security Officers (ISSOs) in support of the Laboratory’s primary research sponsor.

• You will provide leadership, management, and direction to ensure effective execution of the Special Programs cybersecurity program.
• You are responsible for closely monitoring and overseeing the application of security principles and policies, to include the Risk Management Framework (RMF); Joint Special Access Program (SAP) Implementation Guide (JSIG) or its replacement; Intelligence Community Directive 503 (ICD-503); and Security Technical Implementation Guides (STIGs).
• Your responsibilities include the daily oversight, close supervision, and work direction of the team, as well as providing superior customer assistance to Laboratory stakeholders. This position requires in-depth technical knowledge of computer security principles and practices in order to manage a comprehensive cybersecurity program servicing a diverse enterprise environment of ESXi, Linux, UNIX, Sun, and Windows systems.
• You will closely monitor and oversee the development and review of all System Security Plans (SSP) produced by the team, ensuring systems are operated, maintained, and disposed of appropriately.
• You are accountable for the execution of security compliance audits, the results of Government compliance inspections, and security vulnerability assessments on Laboratory and Government information systems, ensuring action is taken to address vulnerabilities and Plans of Action and Milestones (POA&Ms) in a timely manner, and meeting both internal governance and external sponsor requirements.
• You are responsible for ensuring configuration management and continuous monitoring policies and procedures are established and maintained
• You are responsible for ensuring team members participate in an effective cybersecurity education, training and awareness program.
• You will directly conduct prospective candidate screening and hiring actions, participate in personnel retention efforts for assigned staff, and conduct other supervisory duties as assigned including scheduling and conducting interviews and identifying opportunities for professional staff development.

What you need/Requirements:

Bachelor’s degree in computer science, Information Technology, Computer Information Systems, or related discipline required with a minimum of ten (10) years’ experience working in the Information Security field, preferable within Special Access and Sensitive Compartmented Information Programs.

• Must have a minimum of seven (7) years’ leadership and supervisory experience in a DoD or Industrial Security environment, with demonstrated security process maturity outcomes.
• Must have demonstrated knowledge and experience with the National Industrial Security Program with a detailed thorough understanding of the DoD SAP/SCI Community and Intelligence Community requirements and directives, to include in-depth knowledge of Risk Management Framework (RMF), JSIG, ICD 503, NIST SP 800-53 and other associated NIST publications.
• Possess strong organizational skills and the ability to work and establish priorities under pressure in a self-directed, multi-tasking, fast-paced work environment.
• Technical experience and skills in securing multiple operating systems such as Windows Server and clients, Linux, Solaris, and virtualization technologies.
• Strong knowledge of network environments and various network infrastructure products such as routers and switches, Firewall/VPN equipment and Data Loss Prevention strategies utilizing Endpoint Security solutions.
• Demonstrated capabilities in leading cross-functional teams and presenting ideas written and orally within a collaborative team environment is required.
• Demonstrated ability to multitask projects/programs and to redirect priorities as needed.
• Must have excellent interpersonal communication, organizational, and customer service skills.
• Must have excellent oral, written, and presentation skills.
• Technical experience and skills, course work completed toward a degree, and industry IT certifications may be considered substitutes for education requirements.
• Position may require local and some overnight travel.
• Selected candidate will be subject to a pre-employmentbackground investigation and must possessand maintainacurrent in scope Top Secret levelDoDsecurity clearancewithSensitive Compartmented Information (SCI)eligibility.

Ideally, You Will Have:

• Experience working as an ISSM for Special Access Programs.
• Experience leading cybersecurity teams through multiple Government Core Compliance Inspections (CCIs) with successful scores.
• Experience in relationship-building, team building, and excellent Government sponsor communication.
• Cybersecurity Management certifications, such as CISSP, CISM, or IT auditor certification, such as the CISA or GNSA. Other relevant certifications, including DODM 8140 baseline certifications are viewed favorably.

How will you grow?

You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.

• Leadership: Room to advance on your team or to lead cross-functional projects.
• Growth Opportunities: Potential for lateral and vertical movement.
• Education/Training: Management training, mentorship, in-house and external courses.
• Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
• Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.

Hiring Range: $152,100 - $205,300

Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including—but not limited to—the scope and responsibilities of the role, the candidate’s experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.

At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs

Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.

MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.