Cybersecurity – Senior Information System Security Manager (ISSM)

The Boeing Company; Herndon (VA); On-site; USD 147,000 - 201,000; Full time

Job summary

A leading aerospace company is seeking a Cybersecurity - Senior Information System Security Manager to join their Herndon, VA team. This role involves enforcing information system security policies and conducting risk management activities. The ideal candidate will have extensive cybersecurity experience, certifications, and the ability to navigate complex regulatory requirements.

Benefits

Competitive base pay

Health insurance options

Retirement savings plans

Flexible spending accounts

Qualifications

• 5+ years in cybersecurity policy implementation and RMF.
• Active U.S. Top Secret/SCI Security Clearance required.
• Ability to obtain a Counter-Intelligence Polygraph.

Responsibilities

• Conduct cybersecurity analysis of operational environments.
• Manage and conduct risk assessments and ensure compliance.
• Lead staff with assessments and document compliance.

Skills

Cybersecurity policies

Risk Management Framework (RMF)

Information Assurance (IA)

Security tools (NESSUS, ACAS)

Education

IAM Level III Certification (CISSP, GSLC, CISM)

Tools

NESSUS

ACAS

DISA STIGs

SCAP

Audit Reduction tools

Job description

Job Description

At Boeing, we innovate and collaborate to make the world a better place. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing Classified Cybersecurity is currently seeking a Cybersecurity – Senior Information System Security Manager (ISSM) to join the team in Herndon, VA.

The selected candidate will be a highly motivated Cybersecurity Professional on our Enterprise Government Cybersecurity team. The ISSM will rely on a Cybersecurity and Information Assurance (IA) background to be a technical leader and support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSM is responsible for maintaining and enforcing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.

Position Responsibilities:

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted Boeing, industry, and government standards

• Manage, develop, and conduct assessment procedures for verification of Risk Management Framework (RMF) and Assessment and Authorization (A&A) safeguards to meet regulatory requirements based on upcoming NISPOM/DAAPM, RMF, JSIG, ICD-503, and NIST 800 series (800-53, 80-171, etc.) guidelines for new and existing information systems

• Author, provide oversite, and ensure timely delivery of RMF package artifacts to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action & Milestones (POA&M), Continuous Monitoring (CONMON), Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL), etc.

• Coordinate configuration management of assigned systems; auditing systems to ensure security posture integrity

• Review audit data for anomalous or unauthorized activity

• Conduct cybersecurity training, briefings, and presentations to multiple levels of business

• Lead staff with assessments and test/analysis data to document state of compliance with security requirements

• Conduct risk assessments and investigations, implement appropriate risk mitigations, and lead all aspects of incident response activities

• Conduct periodic hardware/software inventory assessments

• Serve as organization spokesperson on sophisticated projects and programs

• Act as advisor to management and customers on sophisticated technical research studies

• Collaborate with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

BasicQualifications (Required Skills/Experience):

• Successfully completed Tier 5 Investigation (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the last 5 years, or requires candidate to have been enrolled in a Continuous Vetting program within the last 5 years

• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, or CISM)

• 5+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series

• Ability to obtain a Counter-Intelligence Polygraph

Preferred Qualifications (Desired Skills/Experience):

• 5+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs

• 5+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS

• 5+ years of experience assessing and documenting test or analysis data to show cyber security compliance

• Active Counter-Intelligence Polygraph

Drug Free Workplace:

Boeingis a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.

Pay & Benefits:

At Boeing, we strive to deliver a Total Rewards package that will attract, engage and retain the top talent. Elements of the Total Rewards package include competitive base pay and variable compensation opportunities.

The Boeing Company also provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work.

The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.

Pay is based upon candidate experience and qualifications, as well as market and business considerations.

Summary pay range: $147,900 - $200,100

Applications for this position will be accepted until Jun. 24, 2025

Export Control Requirements: This position must meet export control compliance requirements. To meet export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.15 is required. “U.S. Person” includes U.S. Citizen, lawful permanent resident, refugee, or asylee.

Export Control Details: US based job, US Person required

Relocation

This position offers relocation based on candidate eligibility.

Security Clearance

This position requires an active U.S. Top Secret/SCI Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active)

Visa Sponsorship

Employer will not sponsor applicants for employment visa status.

Shift

This position is for 1st shift

Equal Opportunity Employer:

Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.