Senior Information Systems Security Officer – Isso – II

Senior Information Systems Security Officer – Isso – II

Requirements

• Typically requires a Bachelor’s degree and a minimum 8 years prior relevant experience, or an Advanced Degree in a related field and minimum 5 years experience.
• IAM Level I certification (Security+ or other)
• Relevant Experience Considered in any combination: Cybersecurity, systems security or hardening, Information Technology, Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA, Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics), Physical security/security, policework/criminal justice, investigations, or Border Patrol, Project or program management, office management, senior administration, or account management.

Responsibilities

• Reviewing and approving (within authority) configuration management requests
• Conducting technical and administrative assessments
• Integrating new Cybersecurity processes, procedures and tools
• Support ISSOs and Cybersecurity Managers in the creation, review and update of Cybersecurity documentation and other technical writing
• Oversee ISSO’s to ensure implementation of policies and procedures as outlined within the Cybersecurity artifacts and governing documentation
• Intermittent travel to other Raytheon locations (10-20%)

Preferred Qualifications

• Experience working in DoD classified operating and/or laboratory environments
• Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.
• Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry
• Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF)
• Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT)
• Familiarity with large multi-facility networks including complex components, including Windows and Linux environments
• Experience interpreting, implementing, and assessing DISA STIGs.
• Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication