Information Systems Security Officer ISSO

Job Description

Compass Call is an airborne tactical electronic attack weapon system that disrupts enemy command and control communications, radars, and navigation systems to restrict adversary battlespace coordination. Spanning air, land, sea, and space, we are developing the technology of tomorrow, delivered today. Drawing strength from our differences, we’re innovating for the future. Our flexible work environment provides you a chance to change the world without giving up your personal life.

BAE Systems is seeking a highly skilled and motivated individual to join our team of professionals as a Cybersecurity Officer/Field Service Engineer. The qualified candidate will be working with the field engineering team to support and maintain Compass Call delivered mission systems and mission support systems at Davis Monthan AFB, AZ. The candidate will serve as an Information Systems Security Officer (ISSO) for systems operated in support of the Compass Call program, including for operations, maintenance, training, and testing. The candidate will have detailed knowledge of the Information systems and provide day-to-day cybersecurity operations support.

Additional knowledge, skills and abilities may include the following:

• Ensure physical and environmental protection measures are coordinated with the appropriate security officials.
• Ensure systems are operated, maintained and disposed of in accordance with security policies and procedures as outlined in the security authorization artifacts.
• Ensure IS security artifacts in Xacta are maintained and updated as needed.
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
• Ensure and provide user account management, that all users have the requisite security clearance, authorization, and need-to-know and are provided before being given access.
• Ensure event management audit records and continuous monitoring policies on all authorized systems are adhered to, collected, reviewed, and archived.
• Ensure system security measures comply with multiple regulatory requirements (e.g. NISPOM, DCID, ICD 503, DoD RMF, JSIG), and accurately assess the impact of modifications, changes, and vulnerabilities for each system where needed.
• Coordinate with the ISSM and AO/DAO regarding system changes or modifications to hardware, software, or firmware of a system.
• Conduct reviews and technical inspections to identify and mitigate potential security weaknesses, and ensure that all security features applied to a system are implemented and functional.
• Conduct periodic reviews of information systems to ensure compliance with the security authorization artifacts.
• Provide cybersecurity tasks training to other team members.
• Provide support and coordinate with other cybersecurity team members to accomplished daily team tasks.
• Provide incident response management of Information Systems through incident response, execution, administrative inquiries, investigations, containment, recovery, and reporting.
• Provide vulnerability management and malware detection through vulnerability scans, antivirus signature scans, and ensuring definitions on all authorized systems are updated.
• Provide information management through trusted file transfers.
• Provide software assurance through trusted acquisition, and functional checks and license management through license verifications.
• Provide asset management through hardware and software inventories and configuration management through use of configuration guides.
• Provide user account management by periodic account verification and documentation on a weekly, monthly, quarterly, and yearly (training, agreements, etc.) schedule.
• Create and maintain all information assurance documentation (e.g. SSPs, Security Profiles, approvals, etc.) for their assigned areas.
• Experience interfacing with internal and external Security personnel, customers, management, and U.S. Government representatives where required (i.e. AOs, DAOs, SCAs, Program Managers, etc.).
• Travel as needed to other business locations to provide necessary cyber security support.
• Knowledge in Windows, Linux, operating systems.
• Handling and managing Communications Security (COMSEC) and classified systems material.
• Formally notify the ISSM and AO/DAO if a system modification may affect its authorization.
• Report all security-related incidents to the ISSM.
• Attend required technical and security training (e.g. OS, networking, security management) that is relative to assigned duties.
• Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly.
• Complete projects and tasks as assigned by the cyber team lead.
• Experience with various Endpoint security, vulnerability, and enumeration tools (e.g. Tenable Nessus, SPLUNK, Newt, Ivanti, Symantec, Purifile, and Document Detective, etc.).
• Experience providing technical security expertise and oversight for complex, cross-domain, heterogeneous classified networked environments in collaboration with government customers, the IT department and other stake holders.
• Experience with various types of special operational equipment.
• Experience in the oversight and execution of the Assessment & Authorization processes (Certification & Accreditation), as defined in JSIG, RMF, and DAAPM.
• Experience with any of the following: DCID 6 3, JSIG, RMF, ICD-503 or equivalent requirements to include technical computer and network system auditing.
• Experience with any of the following: self-inspections, security control assessments, training, log management systems, automated inventory utilities, and auditing.
• Experience with the identification, development, and reporting of IA program performance metrics and oversight of appropriate IA policy, processes and procedures.
• Must be willing to deploy in support of the customer.
• Able to stand for long periods of time and lift up to 50 pounds.

Full Time Onsite Work Requirement. Because of the need for consistent, in-person collaboration and/or the requirement to perform all work onsite due to the nature of this particular role, it will be performed full time on site. This means work will be conducted on location at the Davis Monthan AFB Tucson AZ contractor facility 100% of the time.

Candidate may be required at times to rotationally support 1st, 2nd or 3rd or weekend shifts, to support site OPTEMPO.

Deployment events will range from one to twelve consecutive weeks at a time, and will include travel to both CONUS and OCONUS locations.

Required Education, Experience, & Skills

• Bachelor’s Degree and 2 years work experience or equivalent experience
• Active DoD TOP SECRET security clearance with the ability to obtain/maintain a TS/SCI security clearance (US Citizenship required)
• Must actively possess and maintain a security professional certification such as CompTIA Security+ certification or equivalent, in accordance with DOD 8570.01-M IAT Level II baseline certification, if you do not already have this certification.
• Extended experience with Windows and Linux operating systems
• Highly familiar with cybersecurity defensive tactics, techniques, and procedures

Preferred Education, Experience, & Skills

• Active DoD TS/SCI security clearance (US Citizenship required)
• Strong oral and written communications skills
• Team player with a proactive attitude and the ability to be productive in a dynamic/collaborative environment
• Experience in systems administration and cybersecurity operations and training
• Experience with the Risk Management Framework (RMF) process
• Experience with the Xacta RMF process automation database platform
• Experience in vulnerability assessment, control allocation, and risk mitigation
• Motivated self-starter with good problem solving skills, judgment, and analytical capability
• Skilled in planning and organization of tasks, procedures, and processes

Pay Information

Full-Time Salary Range: $68700 – $116800

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.

About BAE Systems Electronic Systems

BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it’s what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you’ll find a rewarding career that truly makes a difference. Electronic Systems (ES) is the global innovator behind BAE Systems’ game-changing defense and commercial electronics. Exploiting every electron, we push the limits of what is possible, giving our customers the edge and our employees opportunities to change the world. Our products and capabilities can be found everywhere – from the depths of the ocean to the far reaches of space. At our core are more than 14,000 highly talented Electronic Systems employees with the brightest minds in the industry, we make an impact – for our customers and the communities we serve.

Our Commitment to Diversity, Equity, and Inclusion:

At BAE Systems, we work hard every day to nurture an inclusive culture where employees are valued and feel like they belong. We are conscious of the need for all employees to see themselves reflected at every level of the company and know that in order to unlock the full potential of our workforce, everyone must feel confident being their best, most sincere self and be equipped to thrive. We provide impactful professional development experiences to our employees and invest in social impact partnerships to uplift communities and drive purposeful change. Here you will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, grow and belong.

Read Full Description