Cybersecurity Principal
Senior cybersecurity SME/ISSM at Hanscom AFB (Bedford, MA) supporting Air Force Base Information Transport Infrastructure programs. Day to day: implementing the RMF, running assessment & authorization, maintaining security policies, and overseeing ISSOs under DoD directives. Requires an active Top Secret/SCI clearance and a DoDD 8140 IAM Level III certification (e.g., CISSP or CISM).
- Compensation
- $170K–$200K / yr
- Location
- Bedford, MA / Hanscom AFB
- Work setup
- Onsite
- Seniority
- Principal
- Employment
- Contract
- Experience
- 12+ years
- Category
- Security
- Posted
Skills
Must have
- Active Top Secret clearance (must be able to maintain)
- Must be a U.S. Citizen
- Master's/Doctorate + 20 yrs experience (12 in DoD), OR Bachelor's + 25 yrs (15 in DoD), OR 30 yrs directly related experience (20 in DoD)
- DoDD 8140 compliant IAM Level III certification (e.g., GIAC GSLC, CISM, and/or CISSP)
- Support implementation of the RMF
- Perform ISSM duties per DoDI 8510.01 and DoDI 8500.01 for assigned systems/applications
- Develop and maintain a formal Information Systems security program and policies
- Support system/application A&A effort per governing DoD and Air Force policies
- Ensure proper measures on IS incidents or discovered vulnerabilities
- Provide direction to and oversight of ISSOs per DoDI 8500.01
- Maintain repository of organizational/system-level cybersecurity documentation
- Monitor compliance with cybersecurity policy and review results
- Author, review, and maintain IA/security plans (RMF Implementation Plans, Security Risk Analyses, OPSEC Plans, etc.)
- Record system/security/portfolio info in EITDR for FISMA and other statutory compliance
- Act as primary cybersecurity technical advisor to the AO
- Maintain and report IS/Platform IT assessment & authorization status per DoD Component guidance
- Ensure secure configuration and approval of IT below the system level prior to connection to DoD systems
- Support PKI capabilities per DoDI 8520.02 (biometrics, digital signatures, encryption, I&A)
- Ensure deliverables comply with DISA Application Security STIG, incl. source code scanning for SQL injection, XSS, buffer overflows
- Remain current with certifications per DoD 8140.02 / DoD 8570.01-M Appendix 3 and AFMAN 17-1303
Full description
Overview CYBERSECURITY SMELOCATION: Hanscom AFB, Bedford MA
Salary Range:$170-$200,000 annually
JOB STATUS: Full-time
CLEARANCE: Top Secret/SCI
Astrion has an exciting opportunity for a Cybersecurity SME located at HanscomAFB in BedfordMassachusetts in the C3I and Infrastructure Division (AFLCMC/HNI) which focuses on providing enterprise support to over 110 active Air Force, Air National Guard (ANG), and Air Force Reserve installations and bases. The Network Services Professional will provide network services in support of the Base Information Transport Infrastructure (BITI) programs.
REQUIRED QUALIFICATIONS / SKILLS:
- Must have and be able to maintain an active Top Secret clearance
- Must be a U.S. Citizen
- Master’s or Doctorate Degree in a related field and at least 20 years of experience in the respective technical / professional discipline being performed, 12 years of which must be in the DoD
- OR, Bachelor’s Degree in a related field and 25 years of experience in the respective technical/professional discipline being performed, 15 years of which must be in the DoD
- OR, 30 years of directly related experience with proper certifications as described in the PWS labor category performance requirements, 20 years of which must be in the DoD.
RESPONSIBILITIES:
ISSM duties include but are not limited to:
- DoDD 8140 compliant IAM Level III certification, such as the Global Information Assurance Certification, Security Leadership Certification, Certified Information Security Manager and/or CISSP is required.
- Support implementation of the RMF.
- Perform the ISSM duties as outlined in DoDI 8510.01 and DoDI 8500.01 for assigned systems/applications.
- Develop and maintain a formal Information Systems security program and policies for their assigned area of responsibility.
- Supporting the system/application A&A effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., RMF).
- Ensure proper measures are taken when an Information System incident or vulnerability is discovered.
- Maintain and report IS and Platform Information Technology systems assessment and authorization status and issues in accordance with DoD Component guidance.
- Provide direction to the ISSO in accordance with DoDI 8500.01.
- Ensure that ISSOs are appointed in writing and provide oversight to ensure they are following established cybersecurity policies and procedures.