Senior Information Systems Security Officer (ISSO) - onsite San Diego, CA

Job Summary

Our cybersecurity team in San Diego, CA , is seeking a Senior Information Systems Security Officer (ISSO).

The Senior ISSO is responsible for compliance oversight, assessment, and operations of systems under their purview. They may be assigned to a single large-scale program or oversee multiple programs.

Although you will not have direct reports, you will mentor a team of ISSO’s to provide support and advice pertaining to day-to-day occurrences or issues.

You will conduct recurring Cybersecurity reviews on information systems in accordance with DoD Manuals, NIST Special Publications, customer directives, and company policies as applicable (see list below for further details ).

You’ll serve as subject matter experts (SME) on a broad range of Cybersecurity topics. You may represent the Cybersecurity organization and business unit to external Cybersecurity counterparts.

You are responsible for providing guidance and technical training to ISSOs across the organization.

What you will do :

• Reviewing and approving (within authority) configuration management requests
• Conducting technical and administrative assessments
• Integrating new Cybersecurity processes, procedures and tools
• Support ISSOs and Cybersecurity Managers in the creation, review and update of Cybersecurity documentation and other technical writing
• Oversee ISSO’s to ensure implementation of policies and procedures as outlined within the Cybersecurity artifacts and governing documentation
• Intermittent travel to other Raytheon locations (10-20%)

Qualifications you must have :

• Typically requires a Bachelor’s degree with 8 years of experience as described in the bullet below or an advanced degree with 5 years of relevant experience described in the bullet below
• Relevant experience in any combination : Cybersecurity, systems security or hardeningInformation TechnologyExperience with network security and / or systems security, which includes any of the following : architecture, topology, protocols, components, and / or principles Experience with configuring and / or auditing operating systemsCompliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and / or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPAExperience working with and / or supporting computer technologies (such as : databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)Physical security / security, policework / criminal justice, investigations, or Border PatrolProject or program management, office management, senior administration, or account management
• IAM Level I certification (Security+ or other)
• Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.

S. citizens are eligible for a security clearance.

Qualifications we prefer :

• Experience working in DoD classified operating and / or laboratory environments
• Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc.
• Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry
• Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF)
• Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal / external Customers, Information Technology (IT)
• Familiarity with large multi-facility networks including diverse and complex components, including Windows and Linux environments
• Experience interpreting, implementing, and assessing DISA STIGs.
• Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication

The National Industrial Security Program Operating Manual (NISPOM), DoD Special Access Program (SAP) Security Manuals, Risk Management Framework (RMF), Intelligence Community Directive (ICD-503), Joint Special Access Program (SAP) Implementation Guide (JSIG), Defense Counterintelligence Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM), associated National Institute of Standards and Technology (NIST).

What We Offer :

Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value : Trust, Respect, Accountability, Collaboration, and Innovation.

Check us out on YouTube !

RTX solves some of the toughest challenges in aerospace and defense. That requires expansive thinking and bold innovation and that, in turn, requires a culture that is diverse, equitable and inclusive.

We embrace individuality and diversity of thought to fuel opportunity for our employees, our customers, and our communities.

We work toward progress, knowing that a more inclusive world is critical to our mission. Not just in this moment, but always.

LI-Onsite

The salary range for this role is 96,000 USD - 200,000 USD. The salary range provided is a good faith estimate representative of all experience levels.

RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education / training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays.

Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and / or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement.

Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and / or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.