Information System Security Manager

Kratos Defense & Security Solutions, Inc.; Huntsville (AL); On-site; USD 95,000 - 140,000; Full time

Benefits offered by this job

Disability Insurance

401(k) Savings Plan

Employee Stock Purchase Plan (ESPP)

Paid Time Off

Holidays

Education Reimbursement

Job summary

5-D Systems, a KRATOS Company, is seeking a highly motivated Information Systems Security Manager in support of a DoD customer at Redstone Arsenal in Huntsville, AL. You will provide ISSM-Basic support for tactical systems and contribute to RMF A&A.

Responsibilities include evaluating security posture, maintaining RMF packages, coordinating with developers, and ensuring compliance with NIST SP 800-160 and DoD standards. Prior clearance is required.

Qualifications

• Must possess and maintain a US Secret security clearance. Top Secret, SCI eligible, security clearance is a plus.
• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field)
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Knowledge of information system architecture and standards as they apply to cyber security
• Knowledge of NIST SP 800-160, Systems Security Engineering

Responsibilities

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Selecting and assessing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system’s lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Ability to work with system developer to update, maintain, and track RMF and POA&M documentation.
• Documenting preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with DoD security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.

Skills

US Secret clearance

ISSM-Basic certification

RMF/NIST knowledge

NIST SP 800-160 knowledge

DoD STIG requirements

Associates degree

Education

Associates degree (Engineering, IT or Cyber-related field)

Tools

ACAS

Nessus

SCC

STIG Viewer

Job description

5-D Systems, a KRATOS Company, is a growing defense contractor with over twenty-five years’ experience providing systems and software engineering for Unmanned Aircraft Systems and Systems Engineering Technical Support to Government Program Offices.

5-D Systems, a KRATOS Company, is seeking a highly motivated candidate in support of our customer located at Redstone Arsenal in Huntsville, Alabama, who will serve as an Information Systems Security Manager. The candidate will be supporting a Cyber Compliance Team providing ISSM-Basic support for tactical systems. The person will be a key member of a team performing Hardware and Software Cybersecurity analysis along with key functions supporting the Risk Management Framework (RMF) Assessment and Authorization (A&A) process for data processing, test, and tactical systems. Candidate must be able to prioritize competing requirements for time and resources and be able to adjudicate resource requirements based on understanding of Government customer and mission needs.

Principal Duties and Responsibilities

• Provide accurate technical evaluations of the equipment, software applications, full systems, or network and documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls.
• Selecting and assessing security controls, timely completion of accreditation packages, formulating and implementing mitigations and maintaining the security posture of systems.
• Must have experience with eMASS and initiating, updating, and maintaining RMF packages.
• Identify, assess, make risk mitigation recommendations, and document system security threats/risks throughout a system’s lifecycle; validate system security requirements; formulate and maintain documentation and system certification and accreditation activities (planning, testing, assessing and coordinating).
• Ability to work with system developer to update, maintain, and track RMF and POA&M documentation.
• Documenting preliminary or residual security risks for system operation and manage and approve Authorization Packages.
• Monitoring and evaluating a system's compliance with Department of Defense (DoD) security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results, and analyzing the differences to identify impacts and risks at the software application, system, and network levels.

Work with teams to provide solutions and to ensure continued functionality of systems within DoD RMF Framework.

Experience and Skills

Required Skills / Experience:

• Must possess and maintain a US Secret security clearance. Top Secret, SCI eligible, security clearance is a plus.
• Meet DoDD 8140 ISSM-Basic certification, education, and experience compliance.
• Associates degree (Engineering, IT or Cyber-related field)
• Experience with implementing and evaluating DoD STIG requirements, NIST RMF, IAVMs and Cybersecurity assessment tools (ACAS, Nessus, SCC, STIG Viewer)
• Knowledge of the Risk Management Framework (RMF) process and NIST security controls
• Knowledge of information system architecture and standards as they apply to cyber security
• Knowledge of NIST SP 800-160, Systems Security Engineering
• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement

Kratos Defense is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race,color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as aprotected veteran, or any other protected category under applicable federal, state, and local laws.

Disability Accessibility Accommodation

If you require an accommodation to navigate or apply toour careers site, please send your request to [e-mail] or call 858-964-2916. Any inquiries not related to requesting an accommodation will be discarded.

Pay Transparency

The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Job Applicant Privacy Notice

For applicants in the EU and California residents, please review ourprivacy notice .