Information Security System Officer (ISSO)

Intel Corporation • Fairfax, VA

1d • Onsite

About The Position

Intel's Government Information Technology and Security (GITS) organization enables Intel to win United States Government business by providing secure products, solutions, and services which meet U.S. regulatory requirements. The GITS team is part of Intel's Information Security organization and supports the unique IT Information Security and Compliance requirements for Intel Federal LLC, a subsidiary of Intel that delivers products and/or services to the U.S. Government (USG). As part of the GITS team, you will help us grow our secure solution suite to meet U.S. Government requirements for data safeguarding. The Government Information Technology and Security Team (GITS) is composed of highly experienced security professionals with expertise in Enterprise Security Architecture, System Engineering, Information Security, and service/product operations that fulfill and meet regulatory compliance oversight. Within the GITS Team, each member brings diverse expertise and wears multiple hats. We are seeking a talented and motivated individual with strong analytical, communication, and security risk management skills, along with a passion for rapidly learning new technologies. In this role, you will be part of an Agile team, tasked with supporting, improving, and expanding our secure solutions to enhance Intel Government Technology capabilities, with a continuous focus on regulatory compliance for U.S. Government contracts.

Requirements

• US Citizenship required.
• Active US Government TS Security Clearance with the ability to obtain and maintain SCI access.
• Bachelor’s degree and 6+ years of relevant experience -or- A High School Diploma with at least 10+ years of relevant experience in the Government Information Technology (IT) and Information Security Industry.
• Must hold at least one of the following certifications: Security+ CE, CASP+(SecurityX), CISSP, CySA+, GICSP, GSEC, CND, or SSCP.
• 2+ years of experience with the NIST Risk Management Framework (RMF), JSIG, NIST 800-53, and ICD-503.
• 2+ years of experience with Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and Security Requirements Guides (SRGs).
• 4+ years of experience in maintaining Information System package documentation, including System Security Plans (SSP), Plan of Action and Milestones (POAMs), Risk Assessment Reports (RAR), Security Assessment Reports (SAR), Security Requirements Traceability Matrix (SRTM), and hardware and software inventories.

Nice To Haves

• Active US Government TS/SCI Clearance with Polygraph.
• Experience with industry-standard tools for audit reduction, vulnerability scanning, and malware detection, such as Splunk, Tenable Nessus, Security Content Automation Protocol (SCAP) Checker, and STIG viewer.
• Experience in administering and operating IT technologies, including Microsoft Windows, Linux, networks, firewalls, and virtual cloud environments.
• Experience with multiple encryption methodologies for data in transport and at rest.

Responsibilities

• Oversee the security posture of information systems and develop/revise necessary Risk Management Framework (RMF) documentation to support system authorization.
• Create and update standard RMF artifacts, including the System Security Plan (SSP), Plan of Action and Milestones (POAM), Security Controls Traceability Matrix (SCTM), hardware and software inventories, and network topology diagrams.
• Assist in the development and implementation of security policies and procedures required by assessment and authorization activities, in accordance with directives such as ICD-503, DAAPM, NISPOM, JSIG, and NIST 800-53.
• Provide guidance and direction to program personnel, ensuring effective communication within the role.
• Collaborate with system administrators and network engineers to ensure timely application of security patches and secure configurations in line with Security Technical Implementation Guides (STIGs).
• Develop and maintain Certification and Accreditation (CA) package documentation, including System Security Plans (SSPs), Plan of Actions and Milestones (POAM), Risk Assessment Reports, and System Requirements.
• Validate security policies and procedures outlined in the System Security Plan (SSP), customer policies, and regulations, ensuring adherence to local policies.
• Assist with information system security management and day-to-day security operations.
• Serve as a member of the Change Control Board (CCB) to ensure configuration management for Cybersecurity-relevant software, hardware, and firmware is maintained and documented.
• Ensure all personnel receive the necessary technical and security training to perform their duties effectively.
• Conduct security reviews of proposed changes or additions to the information system (including hardware or software) and advise the Information System Security Manager (ISSM) on security relevance.
• Perform vulnerability/risk assessment analysis to support continuous monitoring and the certification and accreditation process.

Benefits

• We offer a total compensation package that ranks among the best in the industry. It consists of competitive pay, stock bonuses, and benefit programs which include health, retirement, and vacation.
• Find out more about the benefits of working at Intel.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level