Information Systems Security Officer at MAG Aerospace

Hanover, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

08 Mar, 26

Salary

140000.0

Posted On

09 Dec, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Information Assurance, Cybersecurity, NIST 800, FIPS, RMF, eMASS, XACTA, System Security Plans, Configuration Management, Contingency Planning, Security Agreements, Cyber Operations, Security Configuration Baselines, DoD 5000, Communication Skills, Analytical Skills

Industry

Aviation and Aerospace Component Manufacturing

Description

Position Summary MAG Aerospace is seeking an experienced Information System Security Officer (ISSO) to support Product Manager Information Warfare Cyber Development (PdM IWCD). This position will provide support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program Activities. This is an opportunity to be a part of the rapidly growing Cyber Development Product Office responsible for key capabilities within the offensive cyber operations world. Essential Duties and Responsibilities Prepare and review system security documentation; for example, System Security Plans (SSP), system boundary definition, systems security plan, configuration management plan, contingency plan, and security agreements (e.g., MOUs, ISAs), etc. Review, prepare, and update full RMF authorization packages. Conduct assessments of information security controls in order to measure the effectives of controls, recommend mitigation strategies/mechanisms and identify any potential gaps. Manage remediation efforts and report on the status of control deficiencies. Provide security expertise to business units and key stakeholders. Provide timely status updates/reporting on assessments and assigned projects. Interact with numerous DOD, military/civilian personnel and industry partners. Teach and guide other cyber security personnel and engineers on the proper processes and procedures. Requirements Active TS/SCI security clearance and willing to take CI Poly. Five (5) to eight (8) years of relevant work experience in executing “life cycle” Information Assurance / Cybersecurity. Thorough knowledge of NIST 800 series Special Publications, Federal Information Processing Standards (FIPS) and other relevant federal and DoD cybersecurity regulations. 5 years of progressively complex experience in the development, integration, and implementation of cyber security and program protection standards for networking, computers, and custom application development. Experience preparing and reviewing RMF authorization packages. Experience with eMASS and XACTA. Must have previous experience with the security authorization process including the review of system security documentation; for example, System Security Plans (SSP), system boundary definition, systems security plan, configuration management plan, contingency plan, and security agreements (e.g., MOUs, ISAs), etc. Familiarity with operational needs statements and DoD 5000 acquisition lifecycle processes. Experience in creating and maintaining security configuration baselines for Windows and Linux platforms, networking equipment, cloud technologies and custom hardware and software applications. Must meet positions and certification requirements outlined in DoD Directive 8570.01M for Information Assurance Technician Level 2. Must have the ability to work in a dynamic environment and effectively interact with numerous DOD, military/civilian personnel and industry partners. Must possess a high degree of initiative and personal accountability requiring minimal supervision. Demonstrate excellent written and oral communications skills; organizational and analytical skills; the ability to express thoughts clearly; and the ability to effectively collaborate in a team environment. Preferred: Candidates possessing advanced certifications to meet IAT level 3 certifications: CISSP, CASP+, CEH, CISM, etc. will be given preference. Education and Certification Requirements: Bachelors Degree required Additional years of experience can be used in lieu of degree. Special Note The position is contingent upon candidate’s ability to meet physical and medical requirements as needed by the position; including compliance with all applicable federal, state, and local jurisdictional requirements. Benefits and Compensation At MAG Aerospace, we value your contributions providing our employees with a robust Total Rewards package that supports your total well-being. Full-time and part-time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG's Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals that do not meet the threshold are only eligible for select offerings not inclusive of health benefits. We encourage you to learn more about our Total Rewards Program by visiting the Resource page on our Careers site: https://www.magaero.com/benefits/. Salary at MAG Aerospace is determined by various factors including but not limited to location, the particular combination of education, knowledge, skills, competencies, and experience as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $110,000 to $140,000 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of MAG's total compensation package for employees.

Responsibilities

The ISSO will prepare and review system security documentation and conduct assessments of information security controls. They will also manage remediation efforts and provide security expertise to business units and stakeholders.