Systems Security Manager II

The ISR (Intelligence, Surveillance & Reconnaissance), Aviation, and Security (IAS) business area is a leader in ISR and aviation, it is a leading prime manned and unmanned aircraft systems integrator for innovative, high-performance ISR and aviation systems. Its end-to-end Command, Control, Computers, Communications and Intelligence, Surveillance & Reconnaissance (C4ISR) capabilities encompass design, integration, test, certification, ground/flight training and complete logistics support. IAS tailors solutions to customer cost, performance, and schedule requirements and designs to consistently exceed expectations – with an unrivaled record of on time and on (or under) budget deliveries. Learn more about IAS

The Systems Security Manager is responsible to design and deploy secure IT systems in support of various special programs. The SSM’s primary focus will be working with skilled technicians to design and implement security controls in a newly minted development environment, assuring customer requirements and expectations are met, whilst remaining in compliance with appropriate USG & enterprise policies, procedures, and requirements. The SSM manages a small team to design, implement and measure security controls across a multi-location network as well as coordinate and engage with other entities and stakeholders across the organization. The SSM will brief leadership on progress, produce reports and manage “up and out” communication to ensure all parties are well-informed.

• Manage a team of highly skilled professionals, perform yearly performance reports and additional duties as needed. Provide technical guidance as needed by team members in support of information systems within the ISSMs responsibility. 

• Ability to manage multiple taskings as needed to ensure mission success and delegate to employees as needed based on skills and availability.

• Serve as site Information Systems Security Manager (ISSM) and maintain security documentation for system hardware and software, to include SSP’s, POA&M’s, equipment specifications, practices and procedure

• Perform mandatory Information System (IS) audit of patching, updating, and scanning based on vulnerabilities and threats or regulatory compliance; maintain the day-to-day security posture and continuous monitoring for all systems

• Conduct risk assessment testing procedures for verification of Certification & Accreditation (C&A)/A&A/RMF safeguards to meet various regulatory requirements based upon RMF for DoD IT, ICD 503, DJSIG, JSIG & NIST guidelines

• Evaluate IS threats and vulnerabilities to determine whether additional safeguards are needed for a wide range of IS security related areas including architectures, firewalls, electronic data traffic, and network access

• Interpret government security classification guides (SCG) to determine classified system requirements and prepare written instructions to facilitate proper security implementation throughout the system lifecycle

• Collaborate with customers (internal and external) during the design and development process to employ best practices when implementing security requirements and controls

• Apply configuration Management (CM) policies and procedures for authorizing the use of hardware/software on an IS; participate in the Configuration Control Board (CCB) to ensure changes are NOT detrimental to system security

• Support Corporate Director of Security and Corporate ISSM in company-wide initiatives

• Coordinate with security managers (both corporate and local), Facility Security Officer (FSO) and Information Systems Security Engineers (ISSE) to define, implement and maintain information security policies, strategies, and procedures

• Implement policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents; assist the SNC IT cyber group with forensic investigations across the corporation

• Assess changes to an IS by performing periodic self-inspections, tests and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed

• Administer IS security education, awareness, and training activities for facility management, IS personnel, users, and others, as appropriate

• Periodic travel to SNC, customer and partner facilities in support of programs. Interface with company and customer staff at all levels

Must Haves:

• Bachelors degree in Systems Security, Network Engineering, Information Technology or related Engineering field of study and typically 4 - 6 years of experience

• Relevant experience may be considered in lieu of required education

• Leadership abilities inclusive of successful change management, mentoring, career development, training, succession planning, holding people accountable, and conducting yearly reviews

• Knowledge of technical standards relating to systems security; experience administering UNIX, Linux, and Windows operating systems, experience with large-scale server systems, thin client architecture, system virtualization and other related peripherals

• Experience with A&A requirements as outlined in the NISPOM, RMF for DOD, ICD 503, JSIG & NIST RMF

• CISSP, or CISM Certification

• Current TS/SCI Clearance

• In-depth knowledge of NIST 800-53, Risk Management Framework (RMF), JSIG requirements and SAP IT processing and BOEs

Preferred:

• Experience with softwares such as Splunk or ELK (other SIEM), ACAS / Nessus, HBSS, eMASS or Xacta 

• Knowledge of DoD, government contracting and/or public auditing, policies, standards, and procedures

SNC offers annual incentive pay based upon performance that is commensurate with the level of the position.

SNC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with 150 match up to 6, life insurance, 3 weeks paid time off, tuition reimbursement, and more.

IMPORTANT NOTICE:

SNC is a global leader in aerospace and national security committed to moving the American Dream forward. We’re known and respected for our mission and execution focus, agility, and disruptive and rapid innovation. We provide leading edge technologies and transformative solutions that support our nation’s most critical security needs. If you are mission-focused, thrive in collaborative environments, and want to make our country stronger with state-of-the-art technologies that safeguard freedom, join our team!

As an Equal Opportunity Employer, we welcome our employees to bring their whole selves to their work. SNC is committed to fostering an inclusive, accepting, and diverse environment free of discrimination.  Employment decisions are made without regarding to race, color, age, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran or other characteristics protected by law. Contributions to SNC come in many shapes and styles, and we believe diversity in our workforce fosters new and greater ways to dream, innovate, and inspire.