SIPRNet Information System Security Manager

About This Role

This role involves securing products and engineering and manufacturing systems by applying cybersecurity principles. The Information Systems Security Manager (ISSM) partners with the security team, program, and government customers. This position is a career opportunity to engage in all aspects of the cyber discipline.

Responsibilities

• Deliver security assessments with 100% accuracy
• Perform system security validations with 100% accuracy, verifying baselines and security configurations
• Maintain 100% active accreditation status of all Authorization To Operate (ATO) packages
• Maintain above 95% credentialed vulnerability scan rates
• Complete 100% Continuous Monitoring (ConMon) objectives for Classified Information Systems
• Effectively communicate with leadership to ensure awareness of progress of deliverables
• Oversee day-to-day information system security operations including hardware and software implementations
• Upkeep, monitor, analyze, and respond to network and security events
• Document compliance actions within the approved automated compliance tracking system or develop a plan of actions and milestones (POA&M) with the Information Systems Security Manager (ISSM) to address non-compliance in the allotted time frame
• Ensure systems are operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the security plan
• Serve as the Information System Security Manager (ISSM) for SIPRNet environments, overseeing classification handling, security policy implementation, continuous monitoring, risk assessments, and incident response to protect classified information and ensure compliance with DoD/DIA security directives

Requirements

• Must possess a DoD 8140/8570 IAM/IAT or IASAE Level III certification (e.g., CISSP, CCSP, CISSP-ISSAP, or CISSP-ISSEP)
• Familiarity with and ability to apply NIST SP 800 53, CNSSI 1253, DoDI 8500.01/8500.02, RMF (or legacy DIACAP), and the DoD Cloud Computing Security Requirements Guide (CCSRG) as they pertain to SIPRNET environments
• Hands on experience with industry standard Information Assurance tools
• Experience with developing, reviewing and maintaining RMF artifacts
• Proven ability to work across multi disciplinary teams, present security posture to senior leadership, and coordinate with system owners, C&A officials, and DOD IA Service Providers (DISPs) to ensure compliance and timely remediation of findings

Nice to have:

• Demonstrated technical experience in Windows and Linux based operating systems and command line
• In-depth experience in system hardening, analysis, vulnerability management and SIPRNet
• Experience implementing or validating Secure Technical Implementation Guidance (STIGs)