Information Systems Security Officer (Onsite)

Prattwhitney; Cambridge (MA); On-site; USD 87,000 - 165,000; Full time

Benefits offered by this job

Parental leave

Flexible work schedules

Achievement awards

Educational assistance and child/adult

Relocation Assistance available

Job summary

RTX BBN in Cambridge, MA is seeking an Information Systems Security Officer (ISSO) to bridge security policies with technical implementation for classified programs. You will work with ISSM/ISSE and admins across the lifecycle to ensure accreditation and compliance.

The role emphasizes system security controls, auditing, and security education, with responsibilities spanning patch management, vulnerability reviews, and collaboration with government representatives.

Qualifications

• Typically requires a University Degree and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience or in absence of a degree, 9 years of relevant experience.
• Experience managing and implementing security program requirements in a classified R&D environment.
• Experience working in Industrial Security, Information Assurance/Cyber, Special Programs, military or government information security programs.
• Experience with compliance-based auditing using the RMF, DCSA Assessment and Authorization Guide (DAAG), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM).
• Certification alignment with DoD 8140.03 Cyber Workforce Qualification and Management Program (Security+)
• Experience with STIGs, SCAP, Splunk or other system hardening and compliance, vulnerability assessment, and/or Security Information and Event Management (SIEM) tools.
• Ability to obtain access to Special Access Programs.
• Active and transferable secret U.S. government issued security clearance is required prior to start date.
• Must be willing to obtain a TS/SCI CI Poly.

Responsibilities

• Work closely with the Information System Security Manager (ISSM)/ ISSE and system administrators on all aspects of the classified program information systems, from development to implementation as they progress through their lifecycle processes.
• Provide guidance, standards, and oversight to the development teams as they work towards accreditation and maintenance of accreditation.
• Assist the ISSM to provide oversight for the information systems security control methods, mitigations, and tools throughout the systems’ lifecycle in compliance with U.S. Department of War security laws, regulations and guidelines.
• Primarily responsible for system compliance, auditing, security plan development and delivering information systems security education and awareness.
• Assist in investigating security violations, help prepare reports specifying corrective and preventative actions.
• Routinely collaborate with the facility security team, program personnel, and government representatives.
• Perform security sustainment activities (hardware and software change management, account management, media protection, user interface, file transfers, etc.).
• Assist in overseeing and managing the patch management process and execution across all RTX BBN security programs.
• Collaborate with peer ISSMs/ISSE and Corporate equivalents for alignment and sharing of best practices.

Skills

RMF implementation

STIGs & SCAP

SIEM tools

Security policy knowledge

Education

University degree in related field

Advanced degree in related field

Tools

Splunk

RMF/DAAG tooling

DISA STIG tooling

Job description

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world. Join us and help shape the future of aerospace and defense.

RTX BBN has an immediate need in the Cambridge, MA facility for Information Systems Security Officer (ISSO). The role of the ISSO is to bridge the gap between high level security policies/requirements and technical/operational implementation of those requirements. Candidates should have in-depth understanding of the cybersecurity policies and procedures for government sector information systems and sufficient technical knowledge and experience to implement them.

What You Will Do

Work closely and effectively with the Information System Security Manager (ISSM)/ Information System Security Engineer (ISSE) and system administrators on all aspects of the classified program information systems, from development to implementation as they progress through their lifecycle processes.

Provide guidance, standards, and oversight to the development teams as they work towards accreditation and maintenance of accreditation.

Assist the ISSM to provide oversight for the information systems security control methods, mitigations, and tools throughout the systems’ lifecycle in compliance with U.S. Department of War security laws, regulations and guidelines.

Primarily responsible for system compliance, auditing, security plan development and delivering information systems security education and awareness.

Assist in investigating security violations, help prepare reports specifying corrective and preventative actions.

Routinely collaborate with the facility security team, program personnel, and government representatives.

Perform security sustainment activities (hardware and software change management, account management, media protection, user interface, file transfers, etc.).

Assist in overseeing and managing the patch management process and execution across all RTX BBN security programs.

Collaborate with peer ISSMs/ISSE and Corporate equivalents for alignment and sharing of best practices.

Qualifications

You Must Have Typically requires a University Degree and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience or in absence of a degree, 9 years of relevant experience.

Experience managing and implementing security program requirements in a classified R&D environment.

Experience working in Industrial Security, Information Assurance/Cyber, Special Programs, military or government information security programs.

Experience with compliance-based auditing using the Risk Management Framework (RMF), Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Guide (DAAG), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM).

Certification alignment with the DoD Manual 8140.03 Cyber Workforce Qualification and Management Program (previously DoD 8570.01-M IAM Level II) (i.e. Security +).

Experience with Security Technical Implementation Guide (STIGs), Secure Content Automation Protocol (SCAP), Splunk or other system hardening and compliance, vulnerability assessment, and/or Security Information and Event Management (SIEM) tools.

Ability to obtain access to Special Access Programs.

Active and transferable secret U.S. government issued security clearance is required prior to start date.

Must be willing to obtain a TS/SCI CI Poly.

Qualifications We Prefer

Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF) process within the Department of War (DOW) and DCSA.

Experience working in classified operating environments.

Experience with various information system security tools that address vulnerability analysis and mitigation.

Experience interpreting, implementing, and assessing Defense Information Systems Agency (DISA) STIGs.

Desired certifications: Security +, CISM, CISSP.

What We Offer

Whether you’re just starting out on your career journey or are an experienced professional, we offer a robust total rewards package with compensation; healthcare, wellness, retirement, and work/life benefits; career development and recognition programs.

• Parental (including paternal) leave
• Flexible work schedules
• Achievement awards
• Educational assistance and child/adult backup care
• Relocation Assistance available

This position is onsite at our Cambridge, MA Location.

To help you achieve your goals, BBN will provide A strong leadership team well-versed in government and Cybersecurity. A collaborative and organized environment to help foster better understanding of Cybersecurity requirements, guidance, and approvals process. Technically competent pool of Cyber/IT team who are willing to mentor, listen, and help you refine your Cybersecurity vision and goals. Access to opportunities that help transition and apply security analysis during the lifecycle of systems through RTX.

The salary range for this role is 86,800 USD - 165,200 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans’ Readjustment Assistance Act.

RTX is an aerospace and defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses - Collins Aerospace, Pratt & Whitney, and Raytheon. Its 195,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, Virginia.