Information System Security Manager

Responsibilities

We are hiring an Information Systems Security Manager (ISSM) that will serve as the principal advisor on all cybersecurity matters, technical and otherwise, involving the security of unclassified and classified information systems under their purview for USSTRATCOM, in Bellevue, Nebraska supporting Offut Air Force Base. 

What you'll do:

The ISSM will be responsible for the following but not limited to:

• Ensures the implementation of the Risk Management Framework (RMF), through the required government policy, make recommendations on process tailoring, participate in and document process activities.
• Will deliver information security support and design recommendations adhering to DoD security policies and compliance mandates while fulfilling customer requirements.
• Will perform periodic assessments of systems and networks within the networking environment and/or enclave and will identify where those systems and networks deviate from acceptable configurations, enclave policy, and compliance requirements.
• Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Document the results of Assessment and Authorization (A&A) activities and technical or coordination activity and prepare the System Security Plans and update the Plan of Actions and Milestones (POA&M).
• Provide oversight and guidance of information security personnel performing system analysis looking for patterns of non-compliance; ensure appropriate administrative or programmatic actions which minimize security risks and insider threats.
• Provide oversight and guidance ensuring systems are properly configured, optimized, and tested ensuring all policy and technical requirements (i.e. Security Technical Implementation Guides (STIGs)) are met.
• Manage all cybersecurity related processes and procedures in the documentation of access control lists on routers, firewalls, CE, printing devices, and other network devices.
• Assess the performance of cybersecurity security controls within the environment.
• Perform control validation and remediation validation of network servers, routers, and switches to ensure they comply with security policy, procedures, and technical requirements.
• Evaluate potential cybersecurity security risk and take appropriate corrective and recovery action utilizing various tasking mechanism such as Remedy, eMASS, XACTA, ACAS, etc.
• Provide oversight and guidance of cybersecurity personnel implementing applicable patching oversight and validation of all security related updates including Cyber Tasking Order compliance.

Qualifications

What you'll need:

• 5 years with BS/BA; 3 years with MS/MA; 0 years with PhD; relevant work or military experience may be considered in lieu of education qualifications.

• Clearance: DoD TS/SCI 

• Certifications: Cybersecurity certificate commensurate to DoD8570.01 IAM Level II (i.e.  CAP, CISSP, CISM) must be acquired within the first 120 days of employment

Peraton Overview

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can’t be done, solving the most daunting challenges facing our customers.

Target Salary Range