Info Systems Security Officer

The Information System Security Officer (ISSO) is responsible for supporting the implementation, assessment, and continuous monitoring of cybersecurity requirements across multiple Electric Boat (EB) Information Systems (IS) in support of the U.S. Navy. This role operates in a fastpaced, missioncritical environment and plays a key part in ensuring system confidentiality, integrity, and availability. This position reports directly to the Chief of Cybersecurity.

The ideal candidate possesses a strong foundation in cybersecurity principles, and the experience to ensure EB ISs are operated and maintained in compliance with all policies and procedures required by the National Institute of Standards and Technology [NIST] Special Publication [SP] 800-53 (NIST SP 800-53).

This position requires a balance of technical knowledge and experience, with strong documentation and reporting skills. Responsibilities include:

Develop and maintain security plan documents (hardware and software baselines, diagrams, user lists)
• Review, track, and process configuration management changes and associated risk assessments
• Process user agreement forms, ensuring users complete necessary training and meet requirements for access
• Develop and maintain system specific policies and procedures
• Collaborate with system and network administrators to validate configurations and ensure compliance with technical security requirements
• Monitor and analyze system and user activity for indications of security concerns
• Monitoring compliance with vulnerability management requirements
• Identify, document, and report noncompliance and security gaps, and support corrective action planning
• Supporting incident response activities
• Work closely with the Information System Security Manager (ISSM) and system stakeholders to maintain system accreditation and overall security posture
• Offer guidance and subject matter expertise on implementing and maintaining security controls
• Supporting internal and external inspections and assessments
• Assist with assessment, authorization, and continuous monitoring activities throughout the system lifecycle

NOTE: This is NOT a remote position.

Required:

• Minimum of A.S. Degree (or higher) in Cybersecurity, Information Technology (IT) or Equivalent, 3+years prior experience as an Information System Security Officer (ISSO), OR Minimum of a high school degree, relevant certifications and 3+years prior experience as an Information System Security Officer (ISSO)

• Ability to obtain and maintain a DoD SECRET clearance

Preferred:

• Experience with the NISPOM, DAAG, RMF process and NIST SP 800-53 Controls
• 1+ years of experience with Linux operating system configuration and cybersecurity hardening standards
• 1+ years of experience with computer networking concepts
• Experience with Security Technical Implementation Guides (STIGs) and their application
• Experience with the Enterprise Mission Assurance Support Service (EMASS)
• Experience monitoring and analyzing user and system activity
• Experience with monitoring security relevant applications (e.g. audit collection, vulnerability management, Security Information Event Monitoring (SIEM))
• Two or more years of experience as a System/Network Engineer/Architect/Administrator, or in an Equivalent RMF role
• Professional Cybersecurity certification (e.g. Security+, CISA, CySA+, CISSP)

• Strong interpersonal, communication, organizational, and time management skills
• Ability to work independently, and collaboratively as part of a multi-functional team in a fast paced and challenging environment
• Strong documentation development and management skills