Information Systems Security Officer (Special Programs)

Phase2 Technology; Austin (TX); On-site; USD 67,000 - 89,000; Full time

Job summary

The University of Texas at Austin is seeking an Information Systems Security Officer (Special Programs) to support ARL: UT at the Pickle Research Campus. You will help manage RMF artifacts, enforce JSIG requirements, and assist the ISSM in security program development across national security computing environments.

Responsibilities include RMF BoE development, system audits, account administration, and ensuring compliance with JSIG and sponsor guidelines. Immediate start date and full-time role.

Qualifications

• Three years information assurance experience in Windows/Linux systems or related area.
• Experience developing and implementing information assurance policy.
• Strong communication, critical thinking, and problem-solving skills with the ability to prioritize projects.
• Experience supporting various system configurations.
• Experience with auditing various OS and networks.
• Relevant education and experience may be substituted as appropriate.

Responsibilities

• IT troubleshooting of government systems and accounts, including workstations, printers, VTC equipment, and thin clients; act as technical POC for government systems and manage trouble tickets.
• Account administration for government owned systems in ARL closed areas; handle account requests, tracking, and training requirements.
• RMF BoE development and maintenance; create SSP, SCTM, and POA&M, and participate in risk assessments.
• Conduct Information System audits using approved techniques/tools; monitor information systems for JSIG compliance.
• Perform other related duties as assigned.

Skills

Information assurance experience

Windows/Linux systems

Policy development

Communication skills

Auditing OS and networks

System configuration support

Education

HS/GED

Bachelor's Degree: Computer Science, Information Systems Management, or related field

Tools

ArcSight

Splunk

Wireshark

ACAS/Nessus

Retina

MBSA

Job description

Job Posting Title: Information Systems Security Officer (Special Programs)

----

Hiring Department: Applied Research Laboratories

----

Position Open To: All Applicants

----

Weekly Scheduled Hours: 40

----

FLSA Status: Exempt from FLSA

----

Earliest Start Date: Immediately

----

Position Duration: Expected to Continue

----

Location: PICKLE RESEARCH CAMPUS

----

Purpose

Manage security programs to meet ARL: UT's Risk Management Framework requirements for National Security computing environments as defined by the National Institute of Standards and Technology 800-Series, Committee on National Security Systems Instructions, Intelligence Community Directives, and Joint Special Access Programs Implementation Guide (JSIG). Assist the Information Systems Security Manager (ISSM) in the development and maintenance of information security Risk Management Framework (RMF) artifacts as well as enforcing standards and compliance of requirements set forth in the Joint Special Access Programs Implementation Guide (JSIG).

Responsibilities

• Information Technology (IT) Support: Provide support for IT government owned systems and system components to ensure that computer hardware and software, as well as networks and servers work consistently and correctly. Duties include installing, upgrading, maintaining, diagnosing connectivity or system access issues, and providing direct support to users across the organization. Experience with IT troubleshooting of system components to include workstations, printers, video teleconference (VTC) equipment, and thin clients necessary. Serve as the technical POC for all government systems and accounts within special programs, taking lead on all technical issues and managing trouble tickets with the government sponsor.
• Information System Administration: Responsible for account administration for government owned systems that reside within ARL closed areas. Duties include account requests, account tracking, training requirements, and account troubleshooting for system user accounts. Responsible for supply chain security process and inventory of new equipment/hard drives.
• Risk Management Framework (RMF) Body of Evidence (BoE) development and maintenance: Advise the information system owner regarding security considerations in the information system development life cycle. Develop and maintain documentation for Assessment and Authorization (A&A) in accordance with applicable policies, procedures, and operating instructions to include System Security Plans (SSP), Security Controls Traceability Matrix (SCTM), and Plan of Actions and Milestones (POA&M). Participate in risk assessments to evaluate the sensitivity of the system. Participate in assessment of system safeguards and program elements.
• Information Security Auditing: Provides technical expertise and oversight to manage the daily administration of security protection measures on the information systems assigned. Conduct Information System audits using approved auditing techniques/tools. Responsible for the continuous monitoring of information systems in order to maintain compliance with the sponsor assessment and Joint Special Access Program (SAP) Implementation Guide (JSIG)
• Other related duties as assigned

Required Qualifications

• HS/GED
• Three years information assurance experience in Windows/ Linux systems or related area.
• Experience developing and implementing information assurance policy
• Strong communication, critical thinking, and problem-solving skills with the ability to prioritize projects
• Experience supporting various system configurations
• Experience with auditing various OS and networks
• Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

• Bachelor's Degree: Computer Science, Information Systems Management, or related field.
• Eligibility for immediate access to classified information at the level appropriate to the project requirements.
• Six years of experience in information assurance in a National Security computing environment.
• Three years' experience with the Risk Management Framework methodology. Knowledge of Special Access and Sensitive Compartmented Information programs and government regulations.
• Experience with policy creation and documentation preparation and maintenance.
• Windows Operating System and Linux Operating System certifications.
• Experience conducting security audits of information systems.
• SIEM Tool Experience (ArcSight, Splunk, Wireshark, etc).
• Experience with vulnerability scanning tools (ACAS/Nessus, Retina, MBSA, etc).
• Possess a current DoDM 8570.01 compliant certification, equivalent to Information Assurance Technical (IAT) Level II (i.e. Security+).

General Notes

An agency designated by the federal government handles the investigation as to the requirement for eligibility for access to classified information. Factors considered during this investigation include but are not limited to allegiance to the United States, foreign influence, foreign preference, criminal conduct, security violations, drug involvement, the likelihood of continuation of such conduct, etc.

UT Austin offers a competitive benefits package that includes:

• 100% employer-paid basic medical coverage
• Retirement contributions
• Paid vacation and sick time
• Paid holidays

Please visit our Human Resources (HR) website to learn more about the total benefits offered.

Salary Range

$67,128 - $88,914+/negotiable depending on qualifications

Working Conditions

• Standard office conditions
• Repetitive use of a keyboard at a workstation
• Telephone use

Required Materials

• Resume/CV
• 3 work references with their contact information; at least one reference should be from a supervisor
• Letter of interest

Employment Eligibility

Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

Retirement Plan Eligibility

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

Background Checks

A criminal history background check will be required for finalist(s) under consideration for this position.

Equal Opportunity Employer

The University of Texas at Austin, as an equal opportunity/affirmative action employer,complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

Pay Transparency

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

Employment Eligibility Verification

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

E-Verify

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university's company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following:

• E-Verify Poster (English and Spanish) [PDF]
• Right to Work Poster (English) [PDF]
• Right to Work Poster (Spanish) [PDF]

Compliance

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031.

The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.