What Your Job Will Be LikeWe are seeking a highly motivated and driven Information Assurance Specialist to join our dynamic team.
On any given day, you may be called on to:
- Ensure appropriate operational security posture is maintained for a given portfolio of information systems.
- Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the security authorization package.
- Develop and maintain System Security Plans (SSP).
- Manage and control changes to system configurations and assess the security impact of those changes.
- Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
- Determine security requirement gaps and provide recommendations or mitigations for addressing the gaps.
- Process security related tasks associated with SSP.
This individual will be assigned the role of Information System Security Officer (ISSO) for multiple information systems, configure and maintain cybersecurity tools, and will work closely with our Information Systems Security Manager (ISSM), other Information Systems Security Officers (ISSOs), other Information Systems Security Engineers (ISSE), and system administrators to provide interpretation and implementation of NIST/JSIG requirements and guidelines along with validation testing. The selected individual will also collaborate with external entities including the Department of Defense and Intelligence Community agencies to securely enable new and emerging programs and maintain existing programs.
Due to the nature of the work, this candidate must be able to work onsite and have the ability to travel for job related trainings, work duties, and customer engagement, as needed.
Salary Range$87,400 - $168,800
*Salary range is estimated, and actual salary will be determined after consideration of the selected candidate's experience and qualifications, and application of any approved geographic salary differential.
Qualifications We Require- Bachelors degree in Management Information Systems, Information Assurance, Computer Science or relevant discipline
- Familiarity with the Risk Management Framework (RMF), the Joint Special Access Program Implementation Guide (JSIG), and/or NIST 800-53 security controls
- Ability to obtain and maintain a Department of Energy (DOE) Q and Sensitive Compartmented Information (SCI) Security Clearances, which may require a polygraph
- Active Certified Information System Security Professional (CISSP) or ability to obtain a CISSP certification within the first 12 months of employment. Selected individual may pursue an Associate of ISC2, in the event that additional professional experience is needed.
Qualifications We Desire- Experience working in a US Government or government contractor cyber security program
- Ability to apply cyber security standards, directives, guidance, and policies to an architectural framework
- Experience working with continuous monitoring tools (i.e. Splunk, ACAS, Nessus, Security Center, HBSS)
- Experience as an Information System Security Officer (ISSO)
- System administration experience, to include a detailed understanding of common operating systems (e.g. Windows and Linux) and networking architecture
- Excellent written, verbal, and interpersonal communication skills
- Demonstrated commitment to ongoing growth and professional development
About Our TeamThe FIE Cyber Security Operations Department supports the Field Intelligence Element/High Security Operations mission by delivering capabilities around information system hardening/accreditation, vulnerability assessment, risk management and analysis with a particular focus on mitigating cyber threats. The cybersecurity staff, consisting of Information Systems Security Managers (ISSMs), Information Systems Security Officers (ISSOs), and Information Systems Security Engineers (ISSEs), provide effective technical solutions for DOE, DoD and the Intelligence Community.
Posting DurationThis posting will be open for application submissions for a minimum of three (3) calendar days, including the 'posting date'. Sandia reserves the right to extend the posting date at any time.
