Job Title: Information System Security Officer

Job Code: 17376

Job Location: Tempe, Arizona

Job Schedule: 9/80- Employees work 9 out of every 14 days – totaling 80 hours worked – and have every other Friday off- 1st shift

Job Description:

Implements the day-to-day information system security program for the assigned classified information systems to include testing, documenting, and continuously monitoring applicable system security controls with the goal to ensure all systems are authorized to operate. Works directly with the Information System Security Manager (ISSM) and Facility Security Officer (FSO), to ensure customer regulations, laws and policy is followed. As an on-site security professional, responsibilities will include execution of all classified information system security for the assigned systems to include system auditing, access control, solution development, vulnerability management, asset management, inspection for prohibited technology, user accounts, user security support, document control (sanitization/degaussing/destruction), and media release processes.  Successful candidates will experience across all layers of the OSI model and exhibit the dedication and expectation of excellence required of a seasoned security professional while working and making decisions independently without direct supervision.  The position will interact with internal and external customers or Government security officials in performance of security duties. 

Essential Functions:

• Works with IT organization to develop device and system hardening guides following manufacturer, DISA, and NIST guidelines
• Analyzing and reviewing vulnerability scan data using tools such as Tenable SC as well as providing vulnerability remediation actions to IT Admins.
• Auditing systems to ensure only approved changes are made utilizing Splunk and applicable scripts.
• Utilizes Splunk search queries to support incident investigation and new requirements
• Identifying system security control implementation shortcomings and developing POA&Ms
• Remediating security control deficiencies
• Investigating security incidents such as data spills, data integrity and malicious events
• Willingness to perform security tasks outside specialty (e.g. program security)

Qualifications:

• Bachelor’s Degree and a minimum of 2 years of prior related experience. Graduate Degree or equivalent with 0 to 2 years of prior related experience. In lieu of a degree, minimum of 6 years of prior related experience.Active US DoD Secret security clearance or SSBI with polygraph. 
• Ability to obtain additional clearances as required.
• DoD 8140.3 ISSM Basic Certification (Sec+) or higher

Preferred Additional Skills:

• Working knowledge of RMF, SSPs, SOPs, and A&A documentation
• In-depth knowledge of NIST special publications,
• Experience as a Cleared Defense Contractor (CDC) working in corporate and/or government environments in support of DoD
• Previous experience in a manufacturing plant IT environment.
• Efficient, proactive, responsive team player with excellent written and oral communication skills; able to interface effectively with all levels of corporate management and government customers
• All required coursework per DAAPM 2.6 within 2 months of hire.