Information Systems Security Officer; Onsite

At RTX, the world's largest aerospace and defense company, 185,000 great minds are united by purpose and inspired to make a difference solving the world’s most complex problems. With our three market leading businesses, world-class operations and investments in research and development, we offer capabilities and opportunity no one else can. Together, we push the boundaries of known science and find new ways to connect and protect our world.

Join us and help shape the future of aerospace and defense.

RTX BBN has an immediate need in the Cambridge, MA facility for Information Systems Security Officer (ISSO). The role of the ISSO is to bridge the gap between high level security policies/requirements and technical/operational implementation of those requirements. Candidates should have in-depth understanding of the cybersecurity policies and procedures for government sector information systems and sufficient technical knowledge and experience to implement them.

Work closely and effectively with the Information System Security Manager (ISSM)/ Information System Security Engineer (ISSE) and system administrators on all aspects of the classified program information systems, from development to implementation as they progress through their lifecycle processes.

Provide guidance, standards, and oversight to the development teams as they work towards accreditation and maintenance of accreditation.

Assist the ISSM to provide oversight for the information systems security control methods, mitigations, and tools throughout the systems’ lifecycle in compliance with U.S. Department of War security laws, regulations and guidelines.

Primarily responsible for system compliance, auditing, security plan development and delivering information systems security education and awareness.

Assist in investigating security violations, help prepare reports specifying corrective and preventative actions.

Routinely collaborate with the facility security team, program personnel, and government representatives.

Perform security sustainment activities (hardware and software change management, account management, media protection, user interface, file transfers, etc.).

Assist in overseeing and managing the patch management process and execution across all RTX BBN security programs.

Collaborate with peer ISSMs/ISSE and Corporate equivalents for alignment and sharing of best practices.

You Must Have Typically requires a University Degree and minimum 5 years prior relevant experience or an Advanced Degree in a related field and minimum 3 years of experience or in absence of a degree, 9 years of relevant experience.

Experience managing and implementing security program requirements in a classified R&D environment.

Experience working in Industrial Security, Information Assurance/Cyber, Special Programs, military or government information security programs.

Experience with compliance-based auditing using the Risk Management Framework (RMF), Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Guide (DAAG), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM).

Certification alignment with the DoD Manual 8140.03 Cyber Workforce Qualification and Management Program (previously DoD 8570.01-M IAM Level II) (i.e. Security +).

Experience with Security Technical Implementation Guide (STIGs), Secure Content Automation Protocol (SCAP), Splunk or other system hardening and compliance, vulnerability assessment, and/or Security Information and Event Management (SIEM) tools.

Ability to obtain access to Special Access Programs.

Active and transferable secret U.S. government issued security clearance is required prior to start date.

Must be willing to obtain a TS/SCI CI Poly.

Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF) process within the Department of War (DOW) and DCSA.

Experience working in classified operating environments.

Experience with various information system security tools that address vulnerability analysis and mitigation.

Experience…