Apply on Employer Site

AV · 3 weeks ago

Information Systems Security Manager (ISSM)

Centreville, VA

Full-time

Onsite

Senior Level

$118K/yr - $167K/yr

7+ years exp

AeroVironment (AV) is a global leader in unmanned aircraft systems and tactical missile systems. They are seeking an Information Systems Security Manager (ISSM) to provide security support for classified systems and networks, maintain accreditations, and assist in risk management framework security planning.

AerospaceAir TransportationDronesElectric VehicleElectronicsEnergyGovernmentManufacturing

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Primary point of contact for Information assurance for all site matters

Lead system documentation for information systems authorization

Developed and disseminate a System Security Plan (SSP) to include continues monitoring, vulnerability risk assessments, Assured File Transfers procedures, hardware/software configuration management, and other security policies and processes that are required by Cognizant Security Agencies

Brief executive leadership of technical reports, customer security assessments, and audits

Review prime and subcontractor DD254’s

Serve as the lead security consultant with internal departments and provide technical and administrative expertise

Maintain long-term customer relations, building trust and respect by consistently meeting and exceeding expectations

Maintain system Accreditation letters for Collateral and Special Access Program (SAP) systems

Assist in investigations involving anomalies to include support to Insider Threat Working Group

Assist with COMSEC inventory and documentation updates to ensure 100% accountability with NSA

Assist with self-inspections, random searches and security violation reports

Assist and conduct security IS education and training

Oversee day-to-day information system security operations including assisting the Sr. ISSM on all technical security matters

Perform other associated duties as required

Qualification

LinuxRisk Management FrameworkEMASSSecurity tools SCAPSecurity tools STIGNetworking tools CiscoNetworking tools JuniperDOD 8140 certificationsSpecial Access Program experienceTechnical communicationTeam collaborationProblem-solving

Required

Bachelor's degree from an accredited college in a related discipline, or equivalent experience/combined education, with 8 years of professional experience; or 7 years of professional experience with a related master's degree

Proficient with Linux based classified systems

Experience with cyber security policies and implementation of Risk Management Framework (RMF): e.g. DAAG, DAAPM, CNSSI 1253, ICD-503, JSIG, and/or NIST SP 800 series

Experience with network/computer architecture and types of Defense Counterintelligence Security Agency (DCSA) system topologies

Provide technical and procedural IS Security advice to government and Internal teams

Ability to work in a team environment, demonstrate excellent problem-solving abilities, be well organized, flexible, and self-motivated

Develop system documentation for information system authorization, security management, and continuous monitoring of both networked and standalone information systems

Available to respond to alarms and emergencies after hours

Final Top Secret Security Clearance

Preferred

Experience working in Special Access Program (SAP) environments

Is a strong communicator who effectively articulates vision/mission to team

Experience with Enterprise Mission Assurance Support Service (eMASS)

Experience with Security relevant tools: e.g. SCAP, STIG, Nessus, ACAS

Working experience with High Assurance Internet Protocol Encryptors/TACLANE

Strong knowledge of Networking tools: e.g. Cisco, Juniper, Netgate, etc

Holds multiple DOD 8140 certifications to include Security and/or Networking

Coordinate with cyber systems security engineers, system architects, and developers to provide oversight in the development of secure technical solutions

Proven ability to obtain and maintain system ATOs

Hands-on experience with ICD 503/JSIG and DAAG/DAAPAM