Information Systems Security Manager

MIT Lincoln Laboratory; Lexington (MA); Hybrid; USD 115,000 - 152,000; Full time

Benefits offered by this job

Comprehensive health plans

MIT-funded pension

Matching 401K

Paid leave

Job summary

MIT Lincoln Laboratory's Security Department leads cybersecurity for SAP information systems and federated programs, directing RMF implementation and SSP management. The role requires DoD and Intelligence Community compliance expertise, international travel as needed, and supervision of ISSOs to protect DoD, IC, and federal systems.

We seek a seasoned cybersecurity leader with a Top-Secret/SCI clearance, a BS in a technical field, and 6+ years in relevant DoD security programs, able to

Qualifications

• Top-Secret clearance with SCI is required.
• U.S. Citizenship is required.
• Background check and polygraph examination must be passed.
• BS degree and 6+ years in DoD cybersecurity required.
• Experience with RMF, SSP artifacts, JSIG, ICD 503, and NISPOM.

Responsibilities

• Lead ISSOs and supervise assigned information systems security.
• Develop and maintain SSPs per JSIG and RMF guidance.
• Conduct security audits and vulnerability assessments.
• Coordinate and participate in incident investigation and mitigation.
• Ensure SETA program participation and security training.
• Provide documentation and reporting to stakeholders.

Skills

Cross-functional leadership

RMF implementation

SSP development

Vulnerability assessments

NIST RMF

JSIG familiarity

DoD 8570 IAM III

Excellent communication

Security incident response

Education

Bachelor's degree in Computer Science, Information Technology, Computer Information Systems, or related field

Job description

The Security Department’s overall mission is to identify and counter security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.

We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Department encourages flexible schedules and hybrid remote work arrangements.

Who are we?

MIT Lincoln Laboratory is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.

• Mission - The Security Department’s overall mission is to identify and counter cybersecurity security threats to the MIT Lincoln Laboratory’s mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
• Culture – We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds.

What will you do?

Leads the cybersecurity program supporting multiple Special Access Program (SAP) information systems and independent Laboratory programs by directing Risk Management Framework (RMF) implementation, managing system authorization activities, and overseeing continuous monitoring. As the principal cybersecurity advisor and primary focal point for assigned programs, this role applies in-depth knowledge of computer security principles, practices, and procedures to execute a comprehensive Information Security program that ensures full compliance with DoD, Intelligence Community, and federal cybersecurity requirements. This position requires the ability to travel internationally, including to overseas locations, as needed to support program and mission requirements.

Core responsibilities include:

• Leads and provides direct supervision to assigned Information Systems Security Officers (ISSOs)
• Prioritizes team workload in alignment with organizational goals and mission objectives
• Develops and maintains multiple System Security Plans (SSPs) in accordance with the Joint SAP Implementation Guide, ensuring systems are operated, maintained, and disposed of per approved SSP requirements
• Conducts security compliance audits and performs vulnerability assessments on Laboratory information systems
• Ensure users and ISSOs participate in an effective information security education, training, and awareness (SETA) program
• Implements and tests IT security policies and procedures as part of a fully integrated cybersecurity program
• Coordinates and participates in the investigation and mitigation of information system security incidents in accordance with NIST SP 800-61
• Assumes ISSO responsibilities in the absence of assigned personnel and responds to off-hour security emergencies as needed
• Recommends and manages budget and resource allocations required to securely operate and maintain organizational cybersecurity capabilities
• Provides technical documentation, incident reports, forensic findings, and situational awareness summaries to key stakeholders
• Identifies potential security violations and initiates appropriate incident reporting procedures
• Supports Program Managers in the development and maintenance of SSP artifacts, including Plans of Action and Milestones (POA&Ms), Risk Assessment Reports, and Continuous Monitoring Strategies
• Aligns IT security priorities with enterprise security strategy and mission requirements
• Prepares for and participates in periodic organizational compliance assessments
• Interpret patterns of noncompliance to assess risk impact and overall effectiveness of the enterprise cybersecurity program

How will you grow?

You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.

• Leadership: Room to advance on your team or to lead cross-functional projects.
• Growth Opportunities: Potential for lateral and vertical movement.
• Education/Training: Management training, mentorship, in-house and external courses.
• Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
• Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.

What you need/Requirments:

To work with MITLL, all employees must meet certain basic requirements.

• Must have a Top-Secret clearance with SCI.
• Must be a U.S. Citizen.
• Successfully pass a background check and consent to undergoing a government polygraph examination.

Ideally, you will have:

The Laboratory values experiences from diverse backgrounds and occupations. The most successful candidates will have the following skills and qualifications.

• BS degree in Computer Science, Information Technology, Computer Information Systems, or related field required and a minimum of six (6) years’ experience within DoD cybersecurity Special Access and Sensitive Compartmented Information Programs.
• Demonstrated capabilities in leading cross-functional teams and presenting ideas written and orally within a collaborative team environment is required.
• Possess a DoD 8570.01-M IAM III baseline certification (e.g. CISSP), or be able to obtain one within 6 months of hire
• Technical experience, skills, and course work completed towards an Undergraduate Degree, or industry IT certifications may be considered in lieu of education or DoW security experience requirements
• Demonstrated understanding of the following security frameworks is required:
• NIST 800-53 / Risk Management Framework (RMF)
• Joint SAP Implementation Guide (JSIG)
• Intelligence Community Directive (ICD) 503
• National Industrial Security Program Operating Manual (NISPOM) Chapter 8
• DoD Manual 5205.07 Volumes 1- 4
• Experienced in auditing, configuration and vulnerability management
• Experience and familiarity with multiple operating systems such as Windows Server 2012, 2016, 2019, 2022 Windows 10 and 11, Red Hat Enterprise Linux, Ubuntu, Mac, etc.
• Experience with virtualization and Cloud technologies is preferred
• Ability to integrate information security requirements into the acquisition process; using applicable baseline security controls as one of the sources for security requirements; ensuring a robust software quality control process; and establishing multiple sources (e.g., delivery routes, for critical system elements).
• Technical experience securing networks and systems utilizing DISA STIGs and/or SRGs is highly desired
• Demonstrated experience with vulnerability scanning and auditing tools and processes is required
• Excellent written and verbal communication skills are required

Hiring Range: $114,600 - $151,900

Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including— but not limited to—the scope and responsibilities of the role, the candidate’s experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.

At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs
• Mentorship programs
• A range of work-life balance options
• ... and much more!

Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks .

Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.

MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.