Information System Security Officer at HII Full Time

Job Description

• Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, internal counter-espionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management).
• Assesses and mitigates system security threats and risks throughout the program life cycle.
• Validates system security requirements definition and analysis.
• Establishes system security designs.
• Implements security designs in hardware, software, data, and procedures.
• Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities.
• Supports secure systems operations and maintenance.
• Review, prepare, and update AIS accreditation packages.
• Notify customers when changes occur that might affect AIS accreditation/certification.
• Perform AIS self-inspections, provide security coordination, and review of all system test plans.
• Identify AIS vulnerabilities and implement countermeasures.
• Represent the customer on various technical review and inspection teams.
• Conduct security surveys at subordinate facilities and gather pertinent security documentation for inclusion into system accreditation packages.
• Coordinate, prepare, and track AIS inspections, reports, and responses.
• Maintain AIS security records.
• Prepare reports on the status of security safeguards applied to computer systems.
• Ensure AIS and network nodes are operated, maintained, and disposed of in accordance with security policies and practices.
• Perform ISSO duties in support of in-house and external customers.

Requirements

• 9 years relevant experience with Bachelors in related field; 7 years relevant experience with Masters in related field; or High School Diploma or equivalent and 13 years relevant experience.
• Possess and maintain an active Secret clearance.
• 5-10 years’ experience in Network/Systems Engineering space supporting DoD and Federal clients.
• Understanding and practical experience with Authority to Operate (ATO) process, Risk Management Framework (RMF) ISSM/ISSO / Security Control Assessment (SCA) experience.
• Experience with eMASS (Project manager, and or contributor).
• Experience with ACAS scanning and vulnerability remediation.

Preferred Requirements

• Experience shepherding development projects through ATO approval (Developing RMF review packages, guiding/coordinating Cybersecurity mitigations).
• Experience working in or for the military.
• Expertise in Multi-national Combatant Command-level military exercises, coalition networking in support of military operations, and/or Mission Partner Environments, such as Pegasus.
• 8570 Level I and II certifications.

Benefits

• Best-in-class medical, dental and vision plan choices.
• Wellness resources.
• Employee assistance programs.
• Savings Plan Options (401(k)).
• Financial planning tools.
• Life insurance.
• Employee discounts.
• Paid holidays and paid time off.
• Tuition reimbursement.
• Early childhood and post-secondary education scholarships.