Information Systems Security Officer

Moog Inc.; Aurora (IL); On-site; USD 80,000 - 115,000; Full time

Benefits offered by this job

Annual bonus

Employee stock purchase plan

Open PTO policy

Region-specific benefits

Job summary

Moog Inc. in Buffalo/East Aurora, NY, is seeking an Information Systems Security Officer (ISSO) to support RMF-based security and accreditation across classified IS.

You will work onsite at our Buffalo/East Aurora HQ, coordinating with ISSM, SCA, and AO to maintain secure configurations and audits. The role requires 5+ years in Information Assurance, knowledge of RMF, DAAPM, NISPOM, and related DoD policies, and experience with scanning, auditing, and PowerShell automation.

Qualifications

• Bachelor's degree preferred; two-year IT degree with 4+ years experience acceptable.
• Minimum of five years' experience in Information Assurance.
• Knowledge of DAAPM, NISPOM, JSIG, ICD 503, RMF, and NIST SPs.
• Proficiency with vulnerability scanning, auditing, SIEM, DLP, and hardening tools (Nessus, SCC, USB controls, STIGs, Windows GPOs, PowerShell).
• Proficiency with data transfers and transfer procedures.
• Ability to obtain/maintain US Secret/Top Secret clearance.
• COMSEC-related experience is a plus.

Responsibilities

• Prepare, update, and maintain RMF documentation (ATO, SSP, RAR, SOP, POA&Ms) for classified networks.
• Audit, update, and continuously monitor IS to ensure RMF/ATO controls.
• Maintain complete inventory of IS including software and hardware.
• Assist DTA and FSO with file transfers per AFT policy.
• Coordinate CM changes with ISSM, SCA, and AO for IS software/hardware.
• Identify device classification risks and determine mitigation safeguards.
• Schedule and maintain IS auditing, patching, and scanning records.
• Work with System Administrators to comply with DISA STIGs and DoD cyber requirements.
• Ensure ISs are operated, maintained, and disposed of per security policies.

Skills

Information Assurance

RMF

DAAPM

NISPOM

JSIG

ICD 503

NIST SPs

PowerShell

Vulnerability Scanning

SIEM

Nessus

Data Transfer

COMSEC

Education

Bachelor's degree in IT/CIS

Two-year IT degree + 4+ years experience

Tools

Nessus

SCAP Compliance Checker

USB Device Control

STIGs

Windows GPOs

PowerShell

Job description

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work.

Job Title :

Information Systems Security Officer

Reporting To:

Director, Grp IT

Work Schedule:

Onsite - Buffalo, NY

Moog is looking for anInformation Systems Security Officer (ISSO)to support the Information Security Manager in the operation, accreditation, maintenance,and auditing of Information Systems (IS) used to process classified information and ensure the operational security posture is maintained in accordance with the system security plans and governing policies (i.e. - DCSA Assessment and Authorization Process Manual – DAAPM and National Industrial Security Program Operating Manual – NISPOM Rule - 32 CFR part 117).

This role sits at our headquarters in East Aurora, NY and has a on-site work schedule.

To be considered for this role, here’s what you need to bring with you…

• A bachelor's degree in information technology, Computer Information Systems, or related field is preferred.

• A two-year IT related degree with four (4) additional years of related experience can be considered in lieu of a formal bachelor's degree.

• Minimum of five (5) years' experience in Information Assurance.

• Knowledge of policies such as DAAPM, NISPOM Rule, JSIG, ICD 503, RMF, and NIST Special Publications.

• Proficiency with using vulnerability scanning, auditing, SIEM, DLP, and hardening tools such as Nessus, SCAP Compliance Checker (SCC), USB Device Control, STIGs, Windows GPOs (importing, testing, implementing, modifying, exporting), and PowerShell scripts for automated and routine tasks.

• Proficiency with performing data transfers and knowledge of data transfer procedures.

• Appropriate US Security Clearance (Secret/Top Secret) or be able to meet the requirements to attain and maintain a clearance.

• COMSEC-related experience is a plus.

As an Information Systems Security Officer (ISSO), here’s what you will do on a daily basis…

• Prepare, update, and maintain Risk Management Framework (RMF) documentation such as, but not limited to, Authorization to Operate (ATO) packages, System Security Plans (SSP), Risk Assessment Reports (RAR), Standard Operating Processes (SOP), and Plan of Actions and Milestones (POA&Ms) for all classified networks and systems.

• Perform regular auditing, updating, and continuous monitoring of the bootable Information Systems (IS) to ensure the security controls are implemented & maintained in accordance with RMF/ATO.

• Maintain complete inventory of IS including software and peripheral hardware.

• Assist Data Transfer Agents (DTA) and Facility Security Officer (FSO) to perform file transfers using removable media in accordance with the Assured File Transfer (AFT) policy and procedures.

• Coordinate with the ISSM, the Security Control Assessor (SCA), and the Authorizing Official (AO) for all Configuration Management (CM) changes and modifications to the IS software and hardware.

• Identify and assess device classification risks and determine appropriate risk mitigation safeguards to maintain security posture.

• Schedule, perform, and maintain records of required IS auditing, patching, maintenance, configuration management changes, and scanning based on evolving threat/vulnerabilities and customer compliance requirements.

• Work with System Administrators (SA) in configuring and maintaining IT components and infrastructure to comply with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and DoD cyber security requirements.

• Ensure ISs are operated, maintained, and properly disposed of in accordance with security policies and procedures.

Salary Range Transparency:

Buffalo, NY $80,000.00-$115,000.00 Annually

Salary Range Disclaimer

The base salary range represents the low and high end of the Moog salary range for this position in the given work location. Actual salaries will vary depending on factors including but not limited to location, experience, and performance. The range(s) listed is just one component of Moog’s total compensation package for employees. Other rewards may include annual bonuses, employee stock purchase plan, an open paid time off policy, and many region-specific benefits.

This position requires access to U.S. export-controlled information.

EOE/AA Minority/Female/Sexual Orientation/Gender Identity/Disability/Veteran

Moog is an Equal Opportunity Employer, and as such affirms the right of every person to participate in all aspects of employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. If you are interested in applying for employment and need special assistance or an accommodation to apply for a posted position, contact our Human Resources department via phone at 844-367-5787.

No unsolicited agency submittals please. Agency partners must be invited to participate in a search by our Talent Acquisition Team and have signed terms in place prior to any submittal. Absent compliance with these pre-conditions resumes submitted directly to any Moog Inc. employee or affiliate will not qualify for fee payment, and therefore become the property of Moog Inc.