Information System Security Manager

InvestedintheMission; Hawthorne (CA); On-site; USD 85,000 - 135,000; Full time

Benefits offered by this job

Stock options

401(k) plan

Health, vision, dental coverage

Paid vacation and holidays

Disability insurance

Job summary

SpaceX seeks an Information System Security Manager to lead the classified cyber assurance program, driving RMF A&A lifecycle activities and ensuring regulatory and contractual compliance across SpaceX information systems.

The role requires coordinating audits, applying industry standards, and mentoring the cyber assurance team, while communicating with internal stakeholders and government customers to advance mission objectives.

Qualifications

• Bachelor's degree or 3+ years of experience managing cyber assurance for classified systems/networks
• 1+ years of experience in cyber assurance for classified information systems

Responsibilities

• Manage the complete RMF A&A lifecycle for assigned SpaceX classified information systems
• Ensure compliance with regulatory, policy, and contractual requirements
• Identify, triage, and implement new regulatory and contractual requirements
• Coordinate audits, assessments, and tests
• Mentor Cleared Cyber Assurance Analysts
• Build relationships with internal stakeholders and government customers

Skills

Cyber assurance

RMF A&A lifecycle

Regulatory compliance

Governance

Stakeholder communication

Education

Bachelor's degree

3+ years experience in cyber assurance for classified systems

Tools

Nessus

Splunk

Security Center

ServiceNow

eMASS

Job description

INFORMATION SYSTEM SECURITY MANAGER

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SpaceX is seeking a classified cyber assurance practitioner to drive the SpaceX classified cyber assurance program forward. The program focuses on three major areas:

• Assessment: Assessing the state of the classified cyber assurance program against industry standards, requirements (contractual and regulatory), and organizational needs.
• Governance: Managing and spearheading governance of the classified cyber assurance program to interpret and drive implementation of industry standards, requirements (contractual and regulatory), and organizational needs.
• Communications: Be "the face" of classified cyber assurance program to both internal and external stakeholders (e.g. customer, regulatory, government and supplier entities).

The successful candidate will assist in driving the classified assurance team to ensure SpaceX delivers on customer requirements, reduces risk, and ensures mission success. We are a fast paced, multi-tasking, highly dynamic work environment with high degrees of autonomy and accountability.

RESPONSIBILITIES:

• Responsible for the complete RMF A&A lifecycle process for assigned SpaceX classified information systems
• Ensure compliance with existing regulatory, policy, and contractual requirements as they pertain to SpaceX classified information systems
• Responsible for identification, triage, and implementation of new regulatory and contractual requirements into both broad and specific applications
• Keep apprised of emerging community practices, risks, and threats
• Plan, prepare for, schedule and coordinate audits, assessments, and tests
• Identify, evaluate, and select various automation, assessment, and management tool sets to drive effectiveness and efficiencies
• Provide expert knowledge of Nessus, Splunk and Security Center tools
• Provide expert knowledge of Service Now (SNOW), eMASS, and other GRC tools
• Guide and mentor Cleared Cyber Assurance Analyst(s)
• Build and maintain positive relationships with internal stakeholders, contractual partners, and government customers
• Successfully further SpaceX objectives and initiatives

BASIC QUALIFICATIONS:

• Bachelor's degree; OR 3+ years of experience managing cyber assurance for classified computer systems/networks in lieu of a degree
• 1+ years of experience in cyber assurance

PREFERRED SKILLS AND EXPERIENCE:

• Demonstrated experience with NRO A&A processes and the JSIG A&A processes
• Subject matter expertise in the RMF 7 step process
• Experience working within highly technical and demanding teams and environments
• Experience with obtaining ATO(s) for networks, weapon systems, and satellite systems
• Demonstrated experience with COMSEC procedures and practices
• Exceptional written and verbal communication skills
• Exceptional organizational skills
• Demonstrated project management skills, and continued track record of getting things done quickly with high quality
• Demonstrated record for providing unique and/or novel solutions
• Demonstrated record of integrating with I.T. and product security functions
• Ability to perform within mission and time constrained environments
• High comfort with and acceptance of performing individual contributor functions/tasks

ADDITIONAL REQUIREMENTS:

• Must be able to work extended hours and/or weekends as needed
• Ability to travel both locally and domestically
• DoD IAM Level III eligibility based on active certifications
• Counterintelligence (CI) scope polygraph (full-scope or lifestyle also acceptable), or ability to successfully complete
• This position is based in Hawthorne, CA and requires being onsite - remote work not considered
• Active Top Secret clearance with SCI eligibility. Note that an active clearance may provide the opportunity for you to work on sensitive SpaceX missions. If so, you will be subject to pre-employment drug and random drug and alcohol testing

COMPENSATION AND BENEFITS:

Pay Range:
Level 1: $85,000 - $115,000
Level 2: $105,000 - $135,000

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.

Those with an active clearance will receive a 10% differential, up to an additional $20,000 annually, once officially briefed into a classified program.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX's Affiniative Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail].