Apply on Employer Site

AV · 6 hours ago

Cyber Security Engineer/Information Systems Security Officer (ISSO)

Redstone Arsenal, AL

Full-time

Onsite

Senior Level

7+ years exp

AeroVironment (AV) is a global leader in unmanned aircraft systems and tactical missile systems, seeking a Cyber Security Engineer/Information Systems Security Officer (ISSO) to join their team. In this role, you will be responsible for developing system security plans, performing risk management framework processes, and ensuring system security artifacts are managed and compliant.

AerospaceAir TransportationDronesElectric VehicleElectronicsEnergyGovernmentManufacturing

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Serve as a member of the cybersecurity team, developing System Security Plans (SSPs), Interim Authority to Test (IATT), Authority to Connect (ATC) and, Authority to Operate (ATO) packages

Perform technical work utilizing the Risk Management Framework (RMF) process including analyzing and solving Information Assurance (IA)-related technical problems

Ensure that system security artifacts are developed, reviewed, and updated as needed

Confirm all RMF requirements are properly addressed and required artifacts are loaded and managed within Enterprise Mission Assurance Support Service (eMASS)

Ability to analyze complex problems, identify root causes, and develop actionable recommendations with effective solutions

Interface with other cyber teams to review RMF Contract Data Requirements List (CDRL) submissions and ensure timely delivery of CDRL artifacts, while providing feedback to ensure the sufficiency and quality of cyber artifacts

Periodically conduct a review of each system’s audits and monitors corrective actions until all actions are closed

Perform vulnerability/risk analysis of systems using expertise in relevant information systems security

Track and monitor Plan of Action and Milestones (POA&M)

Conduct reviews of cybersecurity artifacts and technical briefings and work with customer to resolve any findings

Ensure that identified security controls are implemented and operating as intended through all phases of the lifecycle

Track deliverables (i.e., artifacts, schedules, metrics)

Qualification

Risk Management Framework (RMF)System Security Plans (SSPs)DoD 8570 IAM Level IIVulnerability/Risk AnalysisEMASS ManagementCustomer-orientedSelf-Motivated