Senior Information System Security Officer

Teledyne Brown Engineering, Inc.; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

Teledyne Brown Engineering, Inc. in Huntsville, AL, seeks a Senior Information System Security Officer (Sr. ISSO) to develop, maintain, and accredit specialized IS security programs.

The role requires expertise in NISPOM, RMF, and DAAPM, with hands-on security for Windows and Red Hat systems, DISA STIGs, and SIEM tools. A DoD security clearance is required or achievable.

Qualifications

• Bachelor's degree in a related field; 15+ years of relevant experience.
• Must have or be able to obtain a current security clearance.
• Knowledge of NISPOM, RMF, DAAPM, and related security guidelines.

Responsibilities

• Review and revise IS security plans and ensure compliance.
• Provide day-to-day technical support for classified IS.
• Oversee system compliance and auditing of information systems.
• Assist with IS security training for end-users and DTAs/SAs.
• Implement and validate security controls on computing systems and network devices.
• Coordinate incident investigations and lessons learned for IS security.

Skills

Security clearance

NISPOM RMF

DISA STIGs

Windows/Linux

SIEM experience

Compliance documentation

Independent work

Oral & written communication

Education

Bachelor's degree

Tools

NISPOM

DAAPM

RMF

Red Hat Linux

Windows OS

SIEM tools

Job description

Job Description

Job Summary

The Senior Information System Security Officer (Sr. ISSO) will assist in preparation, development, and maintenance of specialized Information Systems (IS) security plans used to obtain/retain DCSA accreditation.

Essential Duties and Responsibilities

• Review and revise IS system plans documentation based on analysis of the existing equipment configuration. Document any changes or special security requirements.
• Provide day-to-day technical support to classified IS including adherence to policies, procedures, and best practices.
• You will be required to oversee the system compliance, and auditing of the information systems.
• Oversees the information systems readying system configurations for ISSM certification and/or DCSA accreditation/assessment.
• Assist with the design, develop, and implement annual IS security training for the end-users. Similar but specialized training will also be given to the Data Transfer Agents DTAs and SAs annually.
• Assists the SAs in the implementation and validation of security relevant controls on computing systems; network devices such as switches, routers and firewalls; SAN storage; and virtualization hosts and any virtualized systems and appliances.
• Assists in spill containment and cleanup.
• Participates in investigations relating to any IS security violations and provides “lessons learned” information to the IS community to prevent reoccurrence.
• Assists the Information Systems Security Manager (ISSM) and implements information systems security tasks, as required for safeguarding, handling, and controlling of classified materials, documents and equipment. Knowledgeable in information systems security in order to assure enforcement of company and government regulations.
• Knowledge of National Industrial Security Program Operating Manual (NISPOM), DCSA Assessment and Authorization Process Manual (DAAPM), DCSA Assessment and Authorization Guide (DAAG) and Risk Management Framework is required.

Supervisory Responsibilities

• This job has no supervisory responsibilities.

Competencies

• Problem Solving - Identifies and resolves problems in a timely manner; Gathers and analyzes information skillfully.
• Project Management - Communicates changes and progress.
• Technical Skills - Pursues training and development opportunities; Strives to continuously build knowledge and skills.
• Ability to work independently and as a member of a team.
• Oral/Written Communication – Listens and gets clarification; Responds well to questions; Records data; Writes clearly and informatively; Able to read and interpret written information.
• perform well; Accepts feedback from others; Gives appropriate recognition to others.
• Change Management - Develops workable implementation plans; Communicates changes effectively.
• Business Acumen - Understands business implications of decisions.
• Ethics - Treats people with respect.
• Organizational Support - Follows policies and procedures; Supports organization's goals and values.
• Judgment - Includes appropriate people in decision-making process.
• Motivation - Demonstrates persistence and overcomes obstacles.
• Planning/Organizing - Prioritizes and plans work activities; Uses time efficiently.
• Professionalism - Approaches others in a tactful manner; Reacts well under pressure; Accepts responsibility for own actions; Follows through on commitments.
• Quality - Demonstrates accuracy and thoroughness; Looks for ways to improve and promote quality; Applies feedback to improve performance; Monitors own work to ensure quality.
• Quantity - Completes work in timely manner; Strives to increase productivity.
• Safety and Security - Observes safety and security procedures including using Personal Protective Equipment (PPE) as required and wearing company issued badge when on company property; Reports potentially unsafe conditions; Uses equipment and materials properly.
• Adaptability - Adapts to changes in the work environment; Able to deal with frequent change, delays, or unexpected events.
• Initiative - Seeks increased responsibilities; Asks for and offers help when needed.
• Innovation - Generates suggestions for improving work.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Education and/or Experience

• Bachelor's degree (B.S.) from four-year college or university in a related field, such as computer science, information systems, engineering, or other technical disciplines involving information systems.
• 15+ years of relevant experience.

Computer Skills

• Will have knowledge of Windows based (Desktop and Server) operating systems, Red Hat Linux based operating systems and their peripherals are required.
• Knowledgeable in information systems security in order to assure enforcement of company and government regulations.
• Experience interpreting, implementing, and assessing DISA STIGs.
• Knowledge of NISPOM, DAAPM and Risk Management Framework (RMF).
• Microsoft Office Suite (i.e., Outlook, Word, Access, Excel, PowerPoint, Project, Visio, etc.)
• Supported and configured Security Information and Event Management (SIEM) tools.

Other Essential Duties

• Follows all import/export requirements, consulting with facility import/export personnel as required.

Other Skills and Abilities

• Must have obtain and maintain an Intermediate cybersecurity certification Security + or equivalent on the DoD 8140.
• CISSP, CISM, GSLC, CASP, CCISO or any advanced level certification required on the DoD 8140 within one year of hire.
• A Linux+, Network+ or other similar certifications are preferred but not required.

Other Qualifications

• Applicant must have a current security clearance and be able to obtain a Secret clearance.
• Ability to travel (domestically/internationally) approximately _+/-10__%.

#TBE

Teledyne and all of our employees are committed to conducting business with the highest ethical standards. We require all employees to comply with all applicable laws, regulations, rules and regulatory orders. Our reputation for honesty, integrity and high ethics is as important to us as our reputation for making innovative sensing solutions.

Teledyne is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other characteristic or non-merit based factor made unlawful by federal, state, or local laws.