Senior ISSO & Cybersecurity Compliance Lead

General Atomics; Acton (MA); On-site; USD 91,000 - 155,000; Full time

Job summary

General Atomics is seeking an experienced cybersecurity professional to interpret regulations, develop and modify classified environments, and perform system security planning and audits. You will provide architectural analysis of cybersecurity features and help integrate security requirements into new or existing solutions.

The role emphasizes risk identification, incident response support, and maintaining confidentiality of sensitive data, with potential leadership during incidents and

Qualifications

• Typically requires a bachelors degree in a related discipline and six or more years of progressive professional experience in information assurance or a related field.
• Must possess and maintain an active DoD Secret security clearance.
• Must maintain DoD 8570 IAM Level I (e.g. Security +) professional certification as required by customers or contractual obligations.
• Experience with IC DoD policy such as Risk Management Framework and Joint SAP Implementation Guide.
• Operational experience with installing, troubleshooting, and auditing Windows desktop & server operating systems.
• Experience with DISA STIGs, SCAP tool, ACAS.
• Experience installing and troubleshooting common x86-based computer hardware.
• Must demonstrate a general understanding of information assurance principles, theories, concepts and techniques.
• Must have experience organizing, planning, scheduling, conducting, and coordinating work assignments to meet project milestones or established completion dates.
• Must possess the ability to understand new concepts quickly and apply them in an evolving environment while contributing to the development of new processes.
• Must be customer focused and possess: the ability to identify issues, analyze data and develop solutions to a variety of problems; good analytical, verbal and written communication skills to accurately document, report, and present findings; excellent interpersonal skills enabling an effective interface with other professionals; and solid computer skills.
• Ability to work independently or in a team environment is essential as is the ability to work extended hours as required.

Responsibilities

• Assists leadership in interpreting regulations as they apply to information systems, platforms, and IT operating processes, practices and procedures.
• Develops or modifies the classified computing environment to comply with information security plans and requirements.
• Assists in development of System Security Plans, instructions, guidance, and standard operating procedures.
• Performs system and platform audits; analyzes results and provides reports to management.
• Provides architectural analysis of cybersecurity features and relates existing systems to future needs and cybersecurity trends.
• Identifies risks and recommends/implements improvements; ensures corrective measures are taken when incidents or vulnerabilities are discovered.
• Maintains knowledge of applicable policies, regulations, and compliance documents related to classified computing assets and environments.
• Represents the organization as a senior cybersecurity contact with internal and external representatives.
• Integrates security requirements (e.g. DISA STIGs) into new architectures or adapts them to existing solutions.
• Maintains the strict confidentiality of sensitive information.
• May serve as technical lead during incident response situations.

Skills

DoD security clearance

IAM Level I

RMF

DISA STIGs

SCAP

Windows admin

Analytical skills

Communication

Education

Bachelor's degree in related discipline

Tools

Windows OS

ACAS

SCAP

Job description

General Atomics is seeking an experienced cybersecurity professional to interpret regulations, develop and modify classified environments, and perform system security planning and audits. You will provide architectural analysis of cybersecurity features and help integrate security requirements into new or existing solutions.

The role emphasizes risk identification, incident response support, and maintaining confidentiality of sensitive data, with potential leadership during incidents and