Cybersecurity - Information System Security Officer (isso)

Boeing Boeing · Aerospace · Tukwila, WA

This role is for a Cybersecurity Information System Security Officer (ISSO) at Boeing, focusing on maintaining and implementing security policies for classified computing domains. Responsibilities include Risk Management Framework (RMF) processes, continuous monitoring, security assessments, and contributing to enterprise-wide security policies. Requires cybersecurity experience and a relevant certification.

What you'd actually do

  1. Contribute to the development and deployment of program information security for assigned systems to meet the program and enterprise requirements, policies, standards, guidelines and procedures
  2. Implement Risk Management Framework (RMF) processes, product development and product maintenance for assigned systems
  3. Perform security compliance continuous monitoring
  4. Participate in security assessments and audits
  5. Prepare and present technical reports and briefings

Skills

Required

  • IAM Level 1 DoD 8140.01 (previously 8570.01) compliant certification (i.e. CAP, Security+ CE, CISSP, CASP, CISM, GSLC)
  • 3+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series
  • Cybersecurity
  • Information Assurance
  • Risk Management Framework (RMF)

Nice to have

  • 3+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs
  • 3+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, SPLUNK, and HBSS
  • 3+ years of experience assessing and documenting test or analysis data to show cyber security compliance
  • Experience establishing or accrediting a SIPR network

What the JD emphasized

  • Risk Management Framework (RMF)
  • classified computing domains
  • IAM Level 1 DoD 8140.01 (previously 8570.01) compliant certification
  • 3+ years of experience in cybersecurity policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series