System Security Officer

LS Technologies, a Tetra Tech Company, is seeking a System Security Officer to support the Federal Aviation Administration (FAA) in revolutionizing the National Airspace System (NAS) based in Oklahoma City, OK.

• Advise on security considerations in applications systems procurement or development, implementation, operation and maintenance, and disposal activities (i.e. life cycle management).
• Assist in the determination of an appropriate level of security commensurate with system impact level.
• Assist in the development and maintenance of Security Authorization and Information Security Continuous Monitoring (ISCM) documentation for all systems under their responsibility, including:
  System Characterization Documents, System Security Plans and Information System Contingency Plans.
• Participate in risk assessments to periodically re-evaluate sensitivity of the system, risks, and mitigation strategies.
• Assist with the management of remediation actions and Plan of Action & Milestone (POAM) updates to ensure timely remediation of security deficiencies.
• Assist in the assessment of system configuration changes for impact on security posture through participation in the configuration control board processes.
• Notify the responsible officials of any suspected incidents in a timely manner, and assist in the investigation of incidents, as necessary.
• Oversee training, policies, and practices, including audits, to ensure systems are securely operated.
• Document and communicate policies, queries, vulnerabilities, and current state of the system.
• Implement and monitor information security requirements, policies, and compliance.
• Review white papers, standards, security policies, and industry best practices and provide expertise on how the agency can ensure compliance with new security requirements.
• Understand encryption technology; penetration and vulnerability analysis of various security technologies; and information technology security research.
• Manage multiple projects, keep track of and identify new tasks or adjust existing tasks and expectations as the project evolves.

Coordinate with a team of professionals who are both technical and non-technical to keep everyone on task and progressing forward, and ensure the team maintains a positive and collaborative relationship with external stakeholders.

• Bachelor's degree in information management or computer science or related field.
• At least 10 years of experience in Information Security or Cybersecurity.
• Knowledge of National Institute of Standards and Technology (NIST) Special Publications and Federal Information Processing Standard (FIPS) standards.
• Certified Information Systems Security Professional (CISSP) highly desired.
• Proven track record of leadership responsibilities.
• Understanding of the FAA National Airspace System (NAS) as a system of systems, including its domains, its enterprise services, and its overall operational concepts is a plus.
• Have a strong foundation in security engineering and integration support involving a wide range of security issues such as architectures, data flows, and access control.
• Experience with Microsoft Office, including Word, PowerPoint, and Excel.
• Ability to multi-task, handle a high-paced work environment, and adapt to changing priorities.
• Excellent writing, oral communication, and organizational skills.
• Ability to perform detailed work with limited supervision and to interact in a positive manner with other government and industry personnel.
• Applicants must possess or meet eligibility requirements for passing a background investigation for Secret clearance and FAA Suitability.
• Must have ability to obtain a Secret Security Clearance.

• Work Hours:
  
  9AM-5PM
• Travel: 20%
• Extended Computer Use:
  Regular and prolonged periods of working at a computer terminal.
• Mobility:
  Ability to move around the office environment to access computer hardware, networking equipment, and server rooms. Ability to climb stairs and get into tight spaces at large and remote Air Traffic Control facilities.
• Dexterity:
  Manual dexterity and visual acuity to operate computer equipment, troubleshoot issues, and perform tasks requiring…