Apply on Employer Site

MITRE · 3 days ago

Senior Information System Security Officer

McLean, VA

Full-time

Onsite

Senior Level

$129K/yr - $194K/yr

5+ years exp

MITRE is a not-for-profit corporation focused on tackling the nation's toughest challenges, particularly in cybersecurity and defense. The Senior Information Systems Security Officer will provide Information Assurance and Cybersecurity services for classified systems, ensuring security is integrated into engineering projects and managing compliance with established policies and procedures.

Cyber SecurityInformation TechnologyNon ProfitQuantum ComputingSaaS

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead the design and implementation of cybersecurity measures for classified systems, ensuring security is embedded throughout the system lifecycle

Manage the Risk Management Framework (RMF) process, including creating and maintaining System Security Plans (SSPs), Risk Assessment Reports, Plan of Action and Milestone (POA&M), and other security documentation

Serve as the Senior Information Systems Security Officer (ISSO), maintaining operational security posture and ensuring compliance with policies, standards, and procedures

Conduct vulnerability assessments, risk analysis, and continuous monitoring activities to strengthen the cybersecurity posture of classified environments

Collaborate with system administrators, engineers, and stakeholders to mitigate risks and implement best practices

Mentor and develop junior cybersecurity staff, fostering a culture of excellence and innovation

Work alongside the ISSM to ensure classified systems obtain and remain authorized/accredited throughout the life cycle of the classified system

Report system security activities, statuses, progress, issues, roadblocks, and obstacles to the ISSM

Provide subject matter expertise to internal and external partners, supporting the security of advanced technologies

Respond to cybersecurity assessments, improve risk ratings, and develop strategic plans for compliance

Qualification

Risk Management Framework (RMF)NIST SP 800-53System Security Plans (SSPs)Cybersecurity assessmentsTenable NessusSplunkEMASSAnalytical skillsProblem-solving skillsCommunication skillsMentoring skills

Required

Typically requires a minimum of 5 years of related experience with a B.S. in Computer Science; or 3 years and a Master's degree; or a PhD; or equivalent combination of related education and work experience

Active Top Secret clearance with SCI eligibility. Ability to obtain and maintain a Counterintelligence Polygraph (CI Poly)

Experience implementing RMF, NIST SP 800-53, J-SIG, STIGs, and SCAP Compliance Checker

Experience supporting Sensitive Compartmented Information (SCI) and/or Special Access Program (SAP) systems/projects

Experience with tools such as Tenable Nessus, SolarWinds SEM, ACAS, ESS, Trellix AV, PDQ Inventory/Deploy, Splunk

Hands-on experience with tools like eMASS, XACTA, and/or ServiceNow (SNOW)

Knowledge of classified infrastructure and the A&A process

Ability to communicate complex technical concepts clearly to both technical and non-technical audiences

Must meet DoD 8570.01M IAM Level III requirements

This position has an on-site requirement of 5 days a week on-site

Preferred

Experience leading cybersecurity initiatives in classified environments

Knowledge of emerging IT and cybersecurity technologies

Proven ability to advise senior leadership on risk levels, security posture, and policy changes

Previous experience operating as a SCI/SAP ISSO, ISSE, System Administrator, or ISSM

Strong analytical and problem-solving skills, with the ability to develop innovative solutions

Experience mentoring junior staff and fostering a collaborative team environment

Familiarity with insider threat programs and strategies for mitigating insider risks

Expertise in conducting cybersecurity inspections, audits, and self-assessments

Company

MITRE

Glassdoor2.8

The MITRE Corporation is working to solve some of the nation’s biggest challenges in defense, cybersecurity, healthcare, homeland security, the judiciary and transportation.

Founded in 1958

Bedford, Massachusetts, USA

5001-10000 employees