Senior Level – Information Systems Security Officer ISSO

Boeing Intelligence and Analytics

20h • $162,000 - $208,000 • Onsite

About The Position

As a Senior Level Information Systems Security Officer (ISSO) at Boeing Intelligence & Analytics you will play a pivotal role in shaping and enhancing cybersecurity initiatives. Your responsibilities may include:
Conducting technical security assessments and contribute to the security systems.
Ensuring system security compliance, manage risks, and support certification activities throughout the program life cycle.
Work with the application leads, sysadmins, DBAs, developers, and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
Answering questions to ensure systems are developed with security compliance built in.
Supporting security assessment events and respond to all questions from ISSMs and SCAs
Developing and maintaining SSPs, POA&Ms, and other required security documentation using XACTA.
Driving IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
Implementing and validating NIST 800-53 controls in cloud-native DPaaS environments.
Applying Zero Trust principles to secure data services, including identity, segmentation, and flow control.
What Makes BI&A Different:
As a fully owned subsidiary of The Boeing Company, BI&A offers an optimal mix of a small company environment with exceptional opportunities supported by a large corporation.
Every day, Boeing Intelligence & Analytics supports global missions by building and delivering intelligence, analytics, and cyber solutions that enable users to advance national security. From hardware and software engineering solutions to analytics that keep this nation safe, we create value that meets users’ needs. With vibrant partnerships and innovative approaches, we serve the Intelligence Community through innovation and vision. We have provided our customers with the tools needed to counter evolve global and cyber threats, and to improve wartime decision-making.
Our talented employees bring software development, systems engineering, and advanced analytics expertise.
We offer numerous prime contract opportunities with customers headquartered in Maryland, Virginia, and the District of Columbia, as well as subcontract opportunities that align with our areas of focus and additional opportunities nationwide through our parent company.
We have current open positions on awarded programs across diverse customer sets and are anticipating upcoming contract awards with a 5-year life cycle and an additional 5 option years.
Our diverse portfolio allows our employees to move to other projects and teams as they gain further proficiency in their current skill set and learn new skill sets along the way.
We offer hands-on access to cutting-edge technologies and a culture of technical excellence.

Requirements

• 18 Years of experience in Software or Systems Engineering roles or a highly related field of work with similar scope and responsibilities.
• A Bachelor’s degree may be substituted for 4 years of experience and a Master’s Degree may be substituted for 6 years of experience.
• Active TS/SCI with the ability to obtain a CI Polygraph clearance.
• Security+ or other IAT II/III level certification that is currently active.
• Proficiency with XACTA and DIA’s RMF process, including managing IATT and ATO processes.
• Proficiency with Splunk.
• Experience conducting assessments of existing IT architecture for compliance with security requirements from applicable security frameworks (such as ICD 503).
• Experience with implementing and maintaining system security documentation, including SSPs, SAPs, POA&Ms, and security assessment artifacts, coordinating closely with ISSMs, ISSEs, system owners, and authorizing officials.
• Full-time work in a Sensitive Compartmented Information Facility (SCIF) is required, with flexible hours.

Nice To Haves

• Prior Information System Security Officer or Information System Security Engineer experience
• Proven experience leading cybersecurity initiatives for significant programs, showcasing a comprehensive understanding of large-scale program requirements.
• Demonstrated success in team management, highlighting the ability to effectively guide and coordinate cybersecurity professionals.
• Strong background in communication, with a track record of effectively engaging with customer, program leads, leadership teams, and engineers to convey complex cybersecurity concepts and strategies.

Responsibilities

• Conducting technical security assessments and contribute to the security systems.
• Ensuring system security compliance, manage risks, and support certification activities throughout the program life cycle.
• Work with the application leads, sysadmins, DBAs, developers, and testers to ensure the assigned systems are security compliant and achieve/maintain ATO.
• Answering questions to ensure systems are developed with security compliance built in.
• Supporting security assessment events and respond to all questions from ISSMs and SCAs
• Developing and maintaining SSPs, POA&Ms, and other required security documentation using XACTA.
• Driving IATT and ATO efforts, coordinating with stakeholders, cyber, and Authorizing Official (AO).
• Implementing and validating NIST 800-53 controls in cloud-native DPaaS environments.
• Applying Zero Trust principles to secure data services, including identity, segmentation, and flow control.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior