Information System Security Officer

Kratos Defense and Security Solutions; Boulder (CO); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

Life/ADD & Disability Insurance

401(k) Savings Plan

Employee Stock Purchase Plan

Paid Time Off

Holidays

Education Reimbursement

Job summary

Kratos Defense & Security Solutions, Inc. is seeking an ISSO in Boulder, CO to support IA development and RMF compliance for DoD systems. You will prepare SSPs, RARs, POA&Ms, SCTMs, and maintain secure system configurations while coordinating with engineering and product teams.

The role requires DoD directives familiarity, a TS clearance with SCI eligibility, and travel to customer sites. Strong RMF, STIG, and cloud experience are preferred.

Qualifications

• Solid knowledge of the DISA/DoD Risk Management Framework.
• Certifications: CompTIA Security+ CE, CASP+ or equivalent.
• Experience with security controls, RMF, and STIGs.
• Familiarity with virtualization, cloud deployment, and containerization.
• Strong communication across technical and non-technical audiences.

Responsibilities

• Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential vulnerabilities.
• Participate in regular security self-inspections and audits.
• Assist with the selection and implementation of security controls for systems and applications.
• Identify new security features and updates to ensure secure product lifecycle.
• Perform security assessments on new products to ensure secure integration into baselines.
• Provide product security engineering support to resolve issues.
• Create and refine RMF artifacts and security requirements metrics.
• Review security diagnostics and tools for reporting.
• Assist teams in mitigating risks and responding to incidents.
• Participate in security architecture and design reviews.
• Manage system access and revocation requests.
• Track DoD certification requirements per 8140 guidance.

Skills

RMF knowledge

Security+ / CASP+

Cloud security

Vulnerability assessment

Communication

Team coordination

Security architecture

DoD 8140 familiarity

SCIF and DoD procedures

Tools

AWS

Splunk

Tenable/ACAS

SCC/STIG tooling

Job description

Job Description

Readiness Delivered. At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers. Kratos is looking for an ISSO in beautiful Boulder, CO, to support the Information Assurance (IA) development and sustainment of assigned systems and to serve as a security support element for technical teams.

This is accomplished in compliance with CMMC and Risk Management Framework (RMF) policies and procedures, including the development of System Security Plans (SSP), Risk Assessment Reports (RAR), Plans of Action and Milestones (POA&M), and Security Control Traceability Matrices (SCTM). The ISSO maintains the operational security posture to ensure that security policies, standards, and procedures are followed throughout the system lifecycle. Additionally, the ISSO supports vulnerability and risk assessment analysis to achieve and sustain Authorization to Operate (ATO) and ensures information system security requirements are integrated into configuration management for software, hardware, and firmware.

This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides.

Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations may be required.

Primary Responsibilities

• Perform security assessments such as vulnerability and compliance assessments, threat analysis, security code reviews, and risk assessments to identify potential design and implementation vulnerabilities.
• Participate in regular security self-inspections and audits.
• Assist with the selection and implementation of security controls and features for systems and applications.
• Identify new security features and recommend updates to existing products to ensure security is maintained throughout the product lifecycle.
• Perform security assessments on new and proposed products and technologies to ensure secure integration into the approved baseline.
• Provide product security engineering support and recommendations used to resolve integration and testing issues.
• Create and refine standard RMF Body-of-Evidence artifacts.
• Maintain a standardized set of security product requirements and produce metrics to report performance against those requirements.
• Review and define security diagnostics and tools to facilitate the analysis and reporting of security events.
• Assist other teams with mitigating security risks, responding to product security incidents, and product security related issues.
• Participate in security architecture and design review meetings.
• Manage system access and revocation requests.
• Track and verify DoD certification requirements in accordance with DoD 8140 guidance.

Experience And Skills

• Solid knowledge of the DISA/DoD Risk Management Framework.
• CompTIA Security+ CE, CASP+, or equivalent cybersecurity certification.
• Experience with security controls, RMF, and STIGs.
• Familiarity with modern IT infrastructure capabilities to include virtualization, cloud deployment, and containerization.
• Self-motivated and comfortable with supporting multiple groups of developers, engineers, test, and deployment.
• Able to clearly communicate technical concepts orally and in written forms to internal and external audiences with technical and non-technical backgrounds.
• Capable of working in a fast-paced team environment.
• Excellent organizational and communication skills and able to effectively interact with managers and technical staff.
• A strong familiarity with cloud technologies and compliance requirements for cloud
• Top Secret clearance with SCI eligibility required. Candidates with Special Access Program (SAP) experience are highly valued.

Preferred Skills And Experience

• 2 years as an ISSO or equivalent duties.
• Familiarity with eMASS, XACTA, or similar government systems of record.
• Familiarity with Zero Trust Architecture (ZTA) requirements.
• Experience with Windows and RHEL environments.
• Experience with AWS.
• Experience with security tools such in the following areas: Malicious code prevention and analysis (i.e., Trellix), Audit log analysis (Splunk, Greylog, etc.), Patch Management and Vulnerability Analysis (Tenable Security Suite & ACAS), and security tools which support the implementation of DISA STIGs (SCC, Evaluate STIG, STIG Viewer, etc.).

The grade-based pay range for this job is listed below. Individual salaries within that range are determined through a wide variety of factors including but not limited to education, experience, knowledge, and skills.

Competitive salary based on experience and education

Salary Range: $110,000-$140,000

Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offerings—from commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And we always deliver.

This posting will close within 90 days from the Posting Date.

Job Benefits

• Medical, Dental & Vision Insurance Coverage
• Life/ADD & Short/Long Term Disability Insurance
• 401(k) Savings Plan
• Employee Stock Purchase Plan (ESPP)
• Paid Time-Off (PTO)
• Holidays
• Education Reimbursement

Kratos Defense is an Equal Opportunity Affidative Employer. EOE, Minorities, Females, Vet, Disabled, Sexual Orientation, Gender Identity or any other protected class. All qualified job seekers are encouraged to apply. Kratos Defense is committed to America's veterans by providing opportunities for them to continue contributing after service to our nation. We also work to provide reasonable accommodations to individuals with disabilities.

Disability Accessibility Accommodation

If you require an accommodation to navigate or apply to our careers site, please send your request to [e-mail] or call 858-964-2916. Any inquires not related to requesting an accommodation will be discarded.

Pay Transparency

The company will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Job Applicant Privacy Notice

For applicants in the EU and California residents, please review our privacy notice.