Senior Information System Security Officer ISSO

Battelle delivers when others can't. We conduct research and development, manage national laboratories, design and manufacture products and deliver critical services for our clients-whether they are a multi-national corporation, a small start-up or a government agency.

We recognize and appreciate the value and contributions of individuals with diverse backgrounds and experiences and welcome all qualified individuals to apply.

Job Summary

FAST FORWARD TO YOUR NEXT MISSION Integrity, confidence, discipline and commitment define your career in Battelle's National Security Global Business. Battelle was built on a firm foundation of honesty, integrity, and outstanding service and the work we do in national security impacts lives around the world; whether we're creating armor for military applications, testing a life-saving vaccine, or developing a more efficient hydrogen fuel cell. At Battelle, we reward the best work with more responsibility, positions to grow and develop, and the opportunity to make a positive impact on the world. Are YOU ready for your Next Mission?

Battelle is a world leader in science and technology services and research. The Cyber Business Line, Cyber Solutions Division, Cyber Architecture & Advisory Services Practice specializes in providing advanced Cybersecurity and Information Assurance (IA) solutions to our government and commercial clients. The Cyber Architecture & Advisory Services is seeking a Senior Information System Security Officer (ISSO) to lead the Security Architecture and Security Authorization Process (Certification & Accreditation) effort for the Department of Homeland Security's Transportation Security Administration (TSA), TSA Systems Integration Facility (TSIF). The TSIF T&E Division tests and evaluates existing and new technology for use in U. S. A. airports to improve airport efficiency, safety, and security.

This quick fill position is located near TSA TSIF Ronald Reagan National Airport, Arlington, VA. Compensation will be based on qualifications and experience. A full benefits package will be provided. The selected candidate will be expected to travel up to 5% of the time.

Responsibilities

• Provide expert IA policy, risk and technical advisory services to IT executives

• Lead and participate in full lifecycle Security Authorization Process (formerly known as certification and accreditation (C&A)) activities for mission critical applications

• Conduct interviews, document examination, write security documentation

• Manage full lifecycle Security Authorization Process deliverables: Assessment and Authorization (A&A) packages, System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Controls Traceability Matrices (SCTMs), Security Policies and Procedures, vulnerability analysis, and risk management, and Plans of Action & Milestones (POA&Ms) for all systems

• Serve as Security Lead and representative for interagency meetings reviewing TSA TSIF cutting edge technologies, Passenger and Cargo Screening, Test and Evaluation Network

• Develop and deliver security policy white papers and briefings

• Provide research and analysis of latest information technology security trends

• Evaluate and analyze leading edge security technologies to be implemented to improve the organization's security posture.

• Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions.

• Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions.

• Actively contribute to the Battelle Cyber process improvement initiatives

• Actively participate in leading edge cyber security conferences, working groups and training

• Actively participate in Cyber Security Practice 'Solving the Toughest Security Problems' expert group

Key Qualifications

• Must be a U. S. Citizen

• Active DoD SECRET Clearance

• Eligibility and willingness to obtain TSA Security Suitability

• 10+ years IT experience with at least 4+ years of that experience in information assurance and IT security

• Bachelors Degree (BS/BA)

• Certified Information Systems Professional (CISSP)

• Motivated self-starter who requires minimal supervision and oversight

• Strong organizational, and time management skills, and the ability to meet tight deadlines

• Strong Analytical and Writing skills with history of producing quality technical documentation

• Proven knowledge of NIST 800-53 Rev5 Operation, Technical, and Managerial Controls, IT, IA and physical security concepts and principles

• Proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills

• Experience with Windows and Linux configuration STIG hardening

• Experience with switch, router, and firewall configuration, Access Control Lists, and security hardening

• Experience with Active Directory configuration and security, and GPO management

• Expertise with Plans of Actions and Milestones (POA&M) management

• Subject Matter Expertise of the Risk Management Framework (RMF)

Preferred Qualifications

• Current DHS or TSA Security Suitability

• M. S. in Information Systems or related field

• Consulting environment experience

• Experience with DHS CSAM system

• Expertise in identifying security requirements specific to an information technology (IT) system in all phases of the system life cycle.

• Expertise in CyberSecurity Asset Management

• Expertise in evaluating system and application security threats and vulnerabilities

• Experience with DHS MD 4300A Security Controls and Security Assessment Process

• Experience with Nessus, WebInspect, AppDetective, and other vulnerability detection tools

• Experience with DISA Security Technical Implementation Guides (STIGs), implementation SCAP Compliance Checker (SCC) and STIG Viewer.

• Experience with Network security tools Wireshark and Burp Suite

• Knowledge of Personally Identifiable Information (PII) data security standards.

• Experience with Splunk SIEM

• Experience with End Point Protection Tools

• Experience with Unix/Linux, Visual Basic, PowerShell, and other scripting.

• Knowledge of penetration testing principles, tools, and techniques.

• Experience with Cloud Architectural Concepts & Design Requirements.

• Experience with Cloud Data Security

• Experience with Cloud Platform & Infrastructure Security

• Experience with Cloud Application Security

• Expe.