Senior Information Systems Security Officer

Job Description

The Applied Physics Laboratory (APL) has an outstanding opportunity for a Senior Information Systems Security Officer (Sr. ISSO) to join the Security Department.

About this Opportunity:

Reporting to the Information Systems Security Manager, the Senior Information Systems Security Officer will efficiently manage APL-UW classified information systems security resources while maintaining complete security compliance and effective information systems operations. The primary job duties will be to lead journeyman-level IT team members in support of classified information systems security operations.

 

In addition, this position is responsible for developing, implementing, and managing effective and efficient information systems security practices that comply with continually evolving national security laws, federal policies, regulations, and guidelines. The incumbent will support classified information systems operating within multiple accredited environments while ensuring the confidentiality, integrity, and availability of sensitive government information.

 

Additionally, the incumbent will serve as a formal member of the APL Insider Threat Program (ITP) management hub, responsible for identifying and collecting potential threat factors that could adversely affect classified information systems or national security information.

The incumbent will continuously integrate information gathered from a variety of technical, operational, and security sources into APL-UW information systems security practices while coordinating directly with the ISSM. The incumbent will also maintain a functional working relationship with the CSSO to ensure information systems security remains aligned with personnel security, physical security, industrial security, and compartmented security requirements. Coordination with the University's Facility Security Officer (FSO) will be maintained, as appropriate, to ensure consistency across the University's classified security program.

 

Key Responsibilities:

 

Technical Security Operations (45% FTE):

·         Support the ISSM to ensure APL-UW's JWICS, SIPRNet, and classified enclaves maintain strict compliance with IC, DoD, DISA, DCSA, University, and customer requirements.

·         Act as the Network SME guiding the modernization and hands-on administration of classified infrastructure, including managing domain controllers, SANs, and deploying Active Directory GPOs.

·         Administer security tools (HBSS, ESS, ACAS, STIGs) to assess vulnerabilities, validate controls, and interface directly with the Cyber Security Service Provider (CSSP).

·         Serve as the primary systems administrator for testing, packaging, and deploying critical software updates and security patches across all enterprise operating systems and appliances.

·         Enforce user compliance, troubleshoot network operations, and maintain Continuous Monitoring and Risk Scoring (CMRS) records.

 

Classified Security Systems (25% FTE):

·         Establish, operate, and maintain accredited classified processing environments to ensure strict compliance with applicable IC, DoD, DCSA, University, and customer security requirements.

·         Ensure lifecycle protection of JWICS, SIPRNet, and other classified systems by enforcing security procedures, conducting documented weekly checks, and performing required periodic inspections.

·         Perform air-gapped system administration for Windows and RHEL, manually deploying patches, STIG configurations, audit logging, and disaster recovery backups.

·         Partner with the ISSM and CSSO to maintain System Security Plans (SSPs) and strictly integrate information systems with personnel, physical, and industrial security requirements.

 

System Certification and Accreditation (10% FTE):

·         Implement network, application, and access controls, maintaining meticulous Configuration Management (CM) for all security-relevant hardware and software according to government and University requirements.

·         Coordinate the system authorization process for DoD, IC, and DCSA programs by updating required Certification and Accreditation (C&A) documentation and working with the ISSM to validate approved controls.

 

Policy and Procedure Administration (10% FTE):

·         Collaborate with the ISSM to enforce the classified security program, developing and presenting comprehensive security education, awareness training, and operational guidance to all system users.

·         Conduct periodic security self-inspections, certify protection measures to government sponsors, and partner with the CSSO to seamlessly integrate IT policies with personnel, physical, and industrial security protocols.

 

Risk Analysis (10% FTE):

·         Perform comprehensive risk analyses on security-relevant changes, providing actionable recommendations to mitigate emerging vulnerabilities and investigating anomalies that deviate from established baselines.

·         Monitor system, firewall, and IDS logs to investigate anomalous access or malicious activity, serving as an active member of the APL Insider Threat Program (ITP) management hub.

 

Required Qualifications:

To be considered for this opportunity, your application must demonstrate you meet both the minimum qualifications and additional qualifications listed below. Equivalent education and/or experience may substitute for minimum qualifications except when there are legal requirements, such as a license, certification, and/or registration.

 

Minimum Qualifications:

Bachelor's degree in Information Systems Management, Computer Science, Computer Engineering, Cybersecurity, or a closely related discipline and a minimum of four (4) years of progressively responsible experience as a Network Engineer, Network Administrator, Systems Administrator, Information Systems Security Officer (ISSO), or in a comparable information systems security position requiring industry-recognized technical certifications.

 

• Must be a United States Citizen.

• Must possess a Department of Defense (DoD) SECRET security clearance at the time of hire. The incumbent must be eligible for, and able to obtain and maintain, access to Sensitive Compartmented Information (SCI) and other classified information required to support assigned responsibilities.

• Must possess a current DoD 8140 Baseline Information Assurance Technical (IAT) Level III certification or obtain the required certification within the timeframe established by applicable DoD policy.

 

A federal security clearance is required to hold this position. The person hired into this position must be a U.S. citizen and successfully obtain and continue to maintain a Department of Defense (DOD) Personnel Security Clearance. The process for obtaining a DOD Security Clearance can be viewed using the following links: Processing Applicants (dcsa.mil) or General Investigations and Clearance Processes (dcsa.mil)

 

Applicants who do not meet these qualifications WILL NOT be forwarded to the Hiring Department.

 

Preferred Qualifications:

• Must demonstrate technical proficiency with secure network architectures, network routing and switching technologies, Microsoft Windows and Red Hat Enterprise Linux operating systems, virtualization technologies, and information systems security technologies supporting accredited classified information systems.

• Must possess experience supporting or administering classified information systems operating within the Department of Defense (DoD), Intelligence Community (IC), or other accredited classified environments.

• Must possess experience in incident response, vulnerability management, security event analysis, intrusion detection technologies, and implementation of cybersecurity best practices.

• Must possess working knowledge of Department of Defense (DoD), Intelligence Community (IC), Defense Counterintelligence and Security Agency (DCSA), and applicable federal cybersecurity and information systems security requirements, including the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and related security policies.

• Must demonstrate the ability to communicate effectively, both orally and in writing, with senior government officials, University leadership, technical personnel, customers, and non-technical users.

• Must demonstrate the ability to work independently, exercise sound judgment, manage multiple priorities, and make timely decisions supporting classified information systems and organizational mission requirements.

• Must possess the ability to develop technical documentation, security procedures, and information systems security guidance supporting accredited classified information systems.

 

Compensation, Benefits and Position Details

Pay Range Minimum:

$125,004.00 annual

Pay Range Maximum:

$140,364.00 annual

Other Compensation:

-

Benefits:

For information about benefits for this position, visit https://www.washington.edu/jobs/benefits-for-uw-staff/

Shift:

First Shift (United States of America)

Temporary or Regular?

This is a regular position

FTE (Full-Time Equivalent):

100.00%

Union/Bargaining Unit:

Not Applicable