Information Systems Security Officer (ISSO - Onsite

Date Posted:

Country: United States of America

Location: US-CT-EAST HARTFORD-ETC ~ 400 Main St ~ BLDG ETC

Position Role Type: Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance

Security Clearance Type: DoD Clearance:
Secret

Security Clearance Status: Active and existing security clearance required on day 1

The Pratt & Whitney Government Security Compliance (GSC) cybersecurity team is seeking an Information Systems Security Officer (ISSO) to support our team in East Hartford, Connecticut. The successful candidate will report directly to the SAP Enclave Cybersecurity Senior Manager and adherence with NIST Special Publications, customer directives, and company policies as applicable all NISPOM Chapter 8, DAAG, JSIGpolicies. We are looking for people with initiative, creativity, adaptability, strong written and verbal skills, strong analytical skills and attention to detail;

creative troubleshooting skills; possess excellent judgment and professional maturity; have multi-tasking abilities and a client focus; and work effectively in a time sensitive and dynamic environment.

• Work closely with the Information Systems Security Manager (ISSM) to ensure the appropriate operational security posture is maintained for all IS under his/her purview.

• Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness.

• Investigating information system security violations and help prepare reports specifying corrective and preventative actions.

• Reviewing and approving (within authority) configuration management requests.

• Conducting technical and administrative assessments.

• Integrating new cybersecurity processes, procedures, and tools.

• Support the creation, review and update of cybersecurity documentation and other technical writing.

• Ensure all users have the requisite security clearances, authorization, need-to-know, and security responsibility awareness before being granted access to the IS.

• Collect, review, document, and archive security relevant logs, reports and files in accordance with the System Security Plan (SSP), reporting any anomalies to the ISSM.

• Assist in performing incident response activities (investigation, collection, reporting, containment, and eradication) as applicable in accordance with incident response policy, plans, procedures, and ISSM guidance.

• Advanced degree and 6 months of combined experience in Systems Administration, Systems Engineering, Security/Cybersecurity, Info-Tech/Networking, or Management role supporting classified programs or government regulated environment;

• OR Bachelor’s degree and 2+ years of relevant industry experience;
  OR Associate’s degree (or 2-year technical training) and 4+ years of relevant industry experience;
  OR High School diploma or Military / Technical Training and 6+ years of relevant industry experience

• Current IAM Level I certification(Security+ or other)
  OR ability to acquire certification within 6 months of hire.

• Active US Government Security Clearance, SECRET level or higher.

• Active US Government TOP SECRET level security clearance

• Certifications:
  
  A+, Network+, Security+, SSCP, and/or CCNA

• Experience working in DoD classified Special Operating Programs and/or laboratory environments

• Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Guide (DAAG), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), NIST, CNSSI, DoD, or other Government Regulatory compliance standards and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA

• Experience with information system security and monitoring tools (i.e. Splunk, Symantec, Ivanti, Tenable, ACAS, HBSS, etc.)

• Experience with interpreting, implementing, and assessing security hardening guides & tools…