Information Systems Security Officer (Special Programs)

University of Texas; Austin (TX); On-site; USD 67,000 - 89,000; Full time

Job summary

University of Texas’ Applied Research Laboratories seeks an Information Systems Security Officer (Special Programs) to manage security programs aligned with RMF requirements for sensitive environments. The role supports ISSM in developing security artifacts, enforcing JSIG standards, and ensuring government systems remain secure.

Responsibilities include RMF BoE development, auditing, access control, and risk assessments.

Qualifications

• HS/GED or higher required.
• 3+ years information assurance experience in Windows/Linux.
• Experience developing and implementing information assurance policy.
• Strong communication, critical thinking, and problem-solving skills.
• Experience supporting various system configurations.
• Experience auditing OS and networks.
• U.S. citizenship required.
• Eligible for government security clearance.
• Must obtain DoDM 8570.01 IAT II certification within 6 months.

Responsibilities

• IT support for government-owned systems and components across special programs.
• Administer accounts for government-owned systems and ARL facilities.
• Develop and maintain RMF artifacts (SSP, SCTM, POA&M) and A&A docs.
• Conduct security audits and continuous monitoring to ensure JSIG compliance.
• Perform system risk assessments and advise stakeholders on security considerations.

Skills

Communication

Critical thinking

Problem solving

Windows/Linux experience

Auditing OS & networks

Policy development

Project prioritization

Education

HS/GED

Bachelor's degree in CS/IS/related

Tools

IAT II certification

SIEM (ArcSight/Splunk)

Vulnerability scanning tools (ACAS/Nessus/MBSA)

Job description

Information Systems Security Officer (Special Programs)

Hiring Department: Applied Research Laboratories

Position Open To: All Applicants

Weekly Scheduled Hours: 40

FLSA Status: Exempt from FLSA

Earliest Start Date: Immediately

Position Duration: Expected to Continue

Location: PICKLE RESEARCH CAMPUS

Purpose

Manage security programs to meet ARL: UT’s Risk Management Framework requirements for National Security computing environments as defined by the National Institute of Standards and Technology 800-Series, Committee on National Security Systems Instructions, Intelligence Community Directives, and Joint Special Access Programs Implementation Guide (JSIG). Assist the Information Systems Security Manager (ISSM) in the development and maintenance of information security Risk Management Framework (RMF) artifacts as well as enforcing standards and compliance of requirements set forth in the Joint Special Access Programs Implementation Guide (JSIG).

Responsibilities

• Information Technology (IT) Support: Provide support for IT government owned systems and system components to ensure that computer hardware and software, as well as networks and servers work consistently and correctly. Duties include installing, upgrading, maintaining, diagnosing connectivity or system access issues, and providing direct support to users across the organization. Experience with IT troubleshooting of system components to include workstations, printers, video teleconference (VTC) equipment, and thin clients necessary. Serve as the technical POC for all government systems and accounts within special programs, taking lead on all technical issues and managing trouble tickets with the government sponsor.
• Information System Administration: Responsible for account administration for government owned systems that reside within ARL closed areas. Duties include account requests, account tracking, training requirements, and account troubleshooting for system user accounts. Responsible for supply chain security process and inventory of new equipment/hard drives.
• Risk Management Framework (RMF) Body of Evidence (BoE) development and maintenance: Advise the information system owner regarding security considerations in the information system development life cycle. Develop and maintain documentation for Assessment and Authorization (A&A) in accordance with applicable policies, procedures, and operating instructions to include System Security Plans (SSP), Security Controls Traceability Matrix (SCTM), and Plan of Actions and Milestones (POA&M). Participate in risk assessments to evaluate the sensitivity of the system. Participate in assessment of system safeguards and program elements.
• Information Security Auditing: Provides technical expertise and oversight to manage the daily administration of security protection measures on the information systems assigned. Conduct Information System audits using approved auditing techniques/tools. Responsible for the continuous monitoring of information systems in order to maintain compliance with the sponsor assessment and Joint Special Access Program (SAP) Implementation Guide (JSIG).
• Other related duties as assigned.

Required Qualifications

• HS/GED
• Three years information assurance experience in Windows/ Linux systems or related area.
• Experience developing and implementing information assurance policy
• Strong communication, critical thinking, and problem-solving skills with the ability to prioritize projects
• Experience supporting various system configurations
• Experience with auditing various OS and networks
• Relevant education and experience may be substituted as appropriate.
• U.S. citizenship.
• Selected applicant is subject to government security investigation and must meet eligibility requirements for access to classified information at level appropriate to project requirements.
• Employment is contingent on selected applicant submitting application for access and receiving notification of eligibility within a time period specified in the job offer. Employment must begin within 30 days of confirmation of eligibility. Eligibility for access to classified information must continue without interruption during employment.
• Employment will be contingent on selected applicant obtaining a DoDM 8570.01 compliant certification, equivalent to IAT Level II within 6 months of start date. Continued compliant certification, equivalent to IAT Level II is required during employment.

Preferred Qualifications

• Bachelor's Degree: Computer Science, Information Systems Management, or related field.
• Eligibility for immediate access to classified information at the level appropriate to the project requirements of the position.
• Six years of experience in information assurance in a National Security computing environment.
• Three years’ experience with the Risk Management Framework methodology.
• Knowledge of Special Access and Sensitive Compartmented Information programs and government regulations.
• Experience with policy creation and documentation preparation and maintenance.
• Windows Operating System and Linux Operating System certifications.
• Experience conducting security audits of information systems.
• SIEM Tool Experience (ArcSight, Splunk, Wireshark, etc).
• Experience with vulnerability scanning tools (ACAS/Nessus, Retina, MBSA, etc).
• Possess a current DoDM 8570.01 compliant certification, equivalent to Information Assurance Technical (IAT) Level II (i.e. Security+).

General Notes

An agency designated by the federal government handles the investigation as to the requirement for eligibility for access to classified information. Factors considered during this investigation include but are not limited to allegiance to the United States, foreign influence, foreign preference, criminal conduct, security violations, drug involvement, the likelihood of continuation of such conduct, etc. Please mark "yes" on the application question that asks if additional materials are required. Failure to attach all additional materials listed below may result in a delay in application processing. Visit our website (www.arlut.utexas.edu) for additional information about Applied Research Laboratories.

Salary Range

$67,128 - $88,914+/negotiable depending on qualifications

Working Conditions

Standard office conditions

Required Materials

• Resume/CV
• 3 work references with their contact information; at least one reference should be from a supervisor
• Letter of interest

Employment Eligibility

• Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers.
• Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

Retirement Plan Eligibility

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

Background Checks

A criminal history background check will be required for finalist(s) under consideration for this position.

Equal Opportunity Employer

The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

Pay Transparency

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Employment Eligibility Verification

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

E-Verify

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university’s company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following: E-Verify Poster (English and Spanish) [PDF] Right to Work Poster (English) [PDF] Right to Work Poster (Spanish) [PDF]

Compliance

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031. The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.

Comments and Inquiries

Email comments to [e-mail]. For questions or concerns regarding equal opportunity only, contact Equal Opportunity Services. Additional information for applicants can be found on the Human Resources web page: Applying for Employment. For more job information, call the Human Resource Service Center at [phone], or toll-free at [phone]. UT Austin is a Tobacco-free Campus