Cybersecurity – Information System Security Officer (ISSO)

at  Boeing

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.
Boeing Classified Cybersecurity is currently seeking a highly motivated Cybersecurity – Information System Security Officer (ISSO) to join their team in Berkeley, MO.
The selected candidate will rely on a cybersecurity and Information Assurance (IA) background to support Enterprise activities and Boeing customers throughout multiple classified computing domains. The ISSO is responsible for maintaining and enforcing all Information System Security policies, standards, and directives to ensure assessment and authorization of information systems processing classified information.

BASIC QUALIFICATIONS (REQUIRED SKILLS/EXPERIENCE):

• Currently hold certification in good standing to satisfy IAM Level 1 DoD 8140.01 (previously 8570.01) (i.e. CAP, CND, Cloud+, Security+ CE, CASP+ CE, CISSP, GSLC, CCISO or CISM)
• 1+ years of experience in utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS
• Willing to travel up to 10%

PREFERRED QUALIFICATIONS (DESIRED SKILLS/EXPERIENCE):

• Bachelor’s degree or equivalent work or military experience
• Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC, CCISO or CISM)
• 1+ years with the National Industrial Security Procedures and Operations Manual (NISPOM) or the Joint Special Access Program (SAP) Implementation Guide (JSIG)

TYPICAL EDUCATION/EXPERIENCE:

Typically 5 or more years’ related work experience or relevant military experience. Advanced degree (e.g. Bachelor, Master, etc.) preferred, but not required.

POSITION RESPONSIBILITIES:

• Perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards
• Lead and implement the Assessment and Authorization (A&A) processes under the Risk Management Framework (RMF) for new and existing information systems
• Facilitate development of Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acknowledgement Letters (RAL) and support Continuous Monitoring (CONMON)
• Oversee configuration management of assigned systems; auditing systems to ensure security posture integrity
• Lead staff with assessments and test/analysis data to document state of compliance with security requirements
• Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities
• Conduct periodic hardware/software inventory assessments
• Serve as organization spokesperson on advanced projects and programs
• Act as advisor to management and customers on advanced technical research studies
• Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements

ADDITIONAL RESPONSIBILITIES:

• Oversee the development and deployment of program information security for all program systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
• Manage and perform security compliance continuous monitoring
• Oversee and participate in security assessments and audits
• Prepare, review, and present technical reports and briefings
• Identify root causes, prioritizes threats and recommends and/or implements corrective action
• Explore the enterprise and industry for evolving state of industry knowledge and methods regarding information security best practices
  This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.