Overview
We are seeking an experienced Sr Industrial Security Specialist/COMSEC Officer to join our National Security Team in Reston, VA. If you have expertise in managing National Industrial Security Programs in accordance with CFR 32 Part 117, and a working knowledge of Intelligence Community guidelines, we encourage you to apply for this exciting opportunity.
Microsoft’s mission is to empower every person and organization on the planet to achieve more. Our culture is built around a growth mindset that inspires excellence, fosters innovation, and encourages individuals and teams to bring their best every day. By embracing this mindset, we make customer-first decisions that lead to life-changing innovations impacting billions worldwide. We live our values of respect, integrity, and accountability, fostering a culture of inclusion where every individual can thrive—both at work and beyond. You can be part of this transformative journey.
As a proud Defense Industrial Base (DIB) and Cloud Service Provider (CSP), Microsoft plays a vital role in serving the federal government. Protecting our nation’s security and preserving national interests are vital to the safety and prosperity of the United States, and in this role, you’ll be part of ensuring that critical functions operate effectively and securely. If you have demonstrated leadership in supporting the Department of Defense and the Intelligence Community, we invite you to apply for a key role in our National Security Team (NST). NST is responsible for overseeing the company’s industrial security program, enabling all U.S. Federal Government work.
Responsibilities
- Self-Motivation & Problem-Solving: Demonstrate ability to solve complex problems independently and proactively, with a passion for continuous improvement.
- Time Management & Independence: Effectively manage time, prioritize tasks, and work independently to meet deadlines.
- Decision Making: Make informed decisions that enhance the security program and foster strong relationships with internal and external stakeholders.
- Attention to Detail: Maintain a high standard of organization, punctuality, and attention to detail in all tasks.
- Core Values: Exhibit integrity, flexibility, adaptability, and a growth mindset in all aspects of the role.
- Collaboration: Work closely with internal teams such as Insider Threat & Counterintelligence, Personnel Security, Information Systems Security, and Legal to drive the success and integrity of NST’s industrial security program.
- Regulatory Compliance: Engage with Government Security authorities to ensure compliance with regulations and directives, including CFR 32 Part 117, ICDs, DoDM 5105.21, and DoDM 5205.07.
- Training: Conduct Security Education and Training (SETA) sessions to ensure all personnel are well-versed in security protocols.
- Customer Engagement: Serve as a liaison between internal and external customers or government officials in the performance of security duties.
- Accreditation: Maintain ICD705 accreditations in accordance with the guidelines set by the Cognizant Security Agency.
- Security Violations: Investigate security violations, report findings, and submit required documentation to the Cognizant Security Agency.
- Business Relationships: Develop and maintain business relationships across the organization, gaining company-specific insights in a collaborative, cross-functional environment.
- Physical Security: Ensure secure work area (SWA) physical security, including visitor control, access control, and entry/exit inspections.
- Standard Operating Procedures: Prepare and annually update SOPs/EAPs for DoD and IC customers.
- Compliance Program Development: Design and maintain a compliant security program in line with 32 CFR Part 117 and IC directives, ensuring the protection of classified material.
- Regulatory Rulings: Obtain rulings, interpretations, and deviations for compliance with regulations from relevant government agencies.
- Business Impact Projects: Lead NST-driven initiatives that not only advance national security but also drive strategic business outcomes through innovative security solutions.
- Audit Participation: Actively engage in Government security audits and maintain records of audit results.
Qualifications
Required Qualifications
- 4+ years experience in security program or program management or related field OR equivalent experience.
Other Requirements
Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
- The successful candidate must have an active U.S. Government Top Secret Clearance with access to Sensitive Compartmented Information (SCI) based on a Single Scope Background Investigation (SSBI) with Polygraph. Ability to meet Microsoft, customer and/or government security screening requirements are required pre-offer and post-hire for this role. Failure to maintain or obtain the appropriate U.S. Government clearance and/or customer screening requirements may result in employment action up to and including termination.
- Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance
Preferred Qualifications
- Regulatory Knowledge: Demonstrated expertise in industrial security policies and regulations, including Intelligence Community Directives (ICD), NISPOM (32 CFR Part 117), and DoD Directives.
- Experience with analysis and evaluation of both hardware and software in support of Intelligence Community (IC), Department of Defense, and other Federal Government Agencies.
- Government Systems: Proficient in using government security systems, including Defense Information System for Security (DISS), National Background Investigation Services (NBIS), and Scattered Castles. Experience applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resultant security risk analysis.
- COMSEC Knowledge: Understanding and experience with government COMSEC requirements and protocols. Managing COMSEC, keying devices, lifecycle planning.
- Leadership Experience: Proven experience working with senior government officials and corporate executives.
- **Cultural Fit: **Passionate and aligned with the company’s culture and values.
- Operational Security: Develop, create, implement, and support physical and operations security (OpSec) policies, plans, processes and training material that position the FSO and offices to operate in a manner that is compliant with relevant U.S. Government (and/or other unique
- Experience applying security risk assessment methodology to system development, including threat model development, vulnerability assessments, and resultant security risk analysis.
- Experience or knowledge of secure are construction in accordance with ICD 705 requirements.
- Bachelor’s degree and 8+ years of experience in security, security program management, security process implementation, process improvement, or equivalent experience.
- Security Clearance: Active U.S. Government Top Secret (TS) security clearance with Sensitive Compartmented Information (SCI) eligibility and FSP polygraph (or equivalent).
- **Regulatory Knowledge: **Extensive experience with industrial security policies, including ICDs, NISPOM (32 CFR Part 117), and DoD Directives..
Security IC4 - The typical base pay range for this role across the U.S. is USD $96,500 - $188,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $123,500 - $206,400 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about **requesting accommodations.**