Experienced System Security Analyst

Experienced System Security Analyst

Company:

The Boeing Company

Job ID:

00000415459

Date Posted:

2024-02-27

Location:

USA - Herndon, VA

Job Description Qualifications:

The Boeing Defense, Space & Security (BDS) organization, Space and Launch Division is seeking an Experienced Systems Security Analyst (Level 3) to join our team in Herndon, VA. Our Space and Launch Team creates the next generation products and services for the BDS business unit. We work with proprietary customers in the development of the next-generation technologies in space. Our team focuses on rapid prototyping to demonstrate a host of mission-focused technologies for a variety of customers. Our group works all facets of engineering from technology investment, concept development, proposal writing, requirements and design, build, integration, test, and demonstration of products in their relevant environments.

The Experienced Systems Security Analyst will be a part of a high-performing team that is immersed in high intensity development projects. As a member of our team, you will have the opportunity to apply an interdisciplinary, collaborative approach to assist with security and Information Assurance (IA) background to critical customer activities. This role will include maintaining and enforcing all Information System Security policies, standards, and directives to ensure Assessment and Authorization (A&A) of information systems processing classified information.

Position Responsibilities:

• Conduct risk assessments and investigations, executes appropriate risk mitigations, and support incident response activities.

• Conduct security analysis of operational, administrative and development environments to assess compliance with industry and government standards.

• Implement the Assessment and Authorization (A&A) processes for new and existing information systems.

• Facilitate development of security plans/procedures and supports Continuous Monitoring (CONMON).

• Support configuration management and audits of assigned systems to ensure security integrity.

• Perform periodic hardware/software inventory assessments and the disposition of old hardware.

• Interface with government customers, suppliers, and team personnel to implement protective mechanisms and ensure understanding of and compliance with security requirements.

• Participate in the planning and implementation of security measures for new projects and technologies.

• Stay current with industry trends, emerging threats, and security best practices.

• Assist in the development and testing of security contingency and disaster recovery plans.

• Monitor and analyze security alerts and incidents, responding promptly to security breaches or violations.

This position is expected to be 100% onsite. The selected candidate will be required to work onsite at one of the listed location options.

This position requires an active Top Secret/SCI U.S. Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active.). This position is contingent on clearance verification and customer concurrence.

Basic Qualifications (Required Skills/Experience):

• Must have a currently active Top Secret / Top Secret SCI US Security Clearance, or have completed a Tier 5 (T5), formerly known as a Single Scope Background Investigation (SSBI) by the federal government within the past 5 years

• 3+ years of experience leading and supporting enterprise infrastructure security solutions for design and build to actively seek out improvements to security solutions and mitigations to reduce security risk

• Ability to work within a fast-faced, dynamic, global, self-managed team environment

• Willing to cover on call shifts, including weekends and after hours

Preferred Qualifications (Desired Skills/Experience):

• Bachelor, Master or Doctorate of Science degree from an accredited course of study, in engineering, computer science, mathematics, or a related field

• 1 year or more of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, SPLUNK, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS

• Industry-recognized certifications such as CISSP, CISM, or CompTIA Security+

• Excellent communication and interpersonal skills

• Experience with security frameworks and standards (e.g., NIST, ISO 27001)

• Experience in assessing and documenting test or analysis data to show regulation compliance

• Ability to