SAP - Information System Security Officer (ISSO) - Woburn, MA

Date Posted:

2025-10-07

Country:

United States of America

Location:

MA312: Woburn MA 235 Presidential 235 Presidential Way Spencer Building 26, Woburn, MA, 01801 USA

Position Role Type:

Onsite

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date.​ U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance​

Security Clearance:

Secret - Current

At Raytheon, the foundation of everything we do is rooted in our values and a higher calling – to help our nation and allies defend freedoms and deter aggression.  We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today’s mission and stay ahead of tomorrow’s threat.  Our team solves tough, meaningful problems that create a safer, more secure world.

Our cybersecurity team is seeking an Information System Security Officer (ISSO) to support Special Access Programs (SAPs) 100% onsite at our facility in Woburn, Massachusetts. You will directly support a team that interfaces and collaborates with internal & external customers to ensure adherence to all Joint SAP Implementation Guide (JSIG) policies.

What You Will Do

• You will be primarily responsible for system compliance, auditing, security plan development and delivering information system’s security education and awareness.
• You will also assist in investigating information system security violations and help prepare reports specifying corrective and preventative actions.
• The position routinely collaborates with the facility security team, program personnel, and government representatives.
• Security sustainment activities (hardware change management, software change management, account management, media protection, user interface, file transfers, etc.)
• Ensure all users have the requisite security clearances, authorization, need-to-know, and provide security training and guidance.
• Collect, review, document, and archive security event logs, reports and files in accordance with the System Security Plan (SSP),  and report anomalies. Monitor and analyze security tools that track user activity, provide warnings of system vulnerabilities, and provide system compliance status in accordance with cybersecurity plans and policies.
• Manage tracking, accounting, safeguarding, and disposition of material assets associated with the information security systems.

Important note: Within six months of hire date, you must obtain and maintain a Security professional certification commensurate with IAM Level I certification (Security+ or other), if you do not already have this certification.

Qualifications You Must Have

• Typically requires a Bachelors Degree and minimum 2 years prior relevant experience, or an Advanced Degree in a related field.

• Relevant Experience Considered in any combination:

  • Cybersecurity, systems security or hardening

  • Information Technology

  • Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA

  • Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics)

  • Physical security/security, policework/criminal justice, investigations, or Border Patrol

  • Project or program management, office management, senior administration, or account management

Qualifications We Prefer

• Experience working in DoD classified operating and/or laboratory environments

• Familiarity with cybersecurity Risk Management Framework (RMF) and compliance as stipulated by NISPOM/DAAPM, JSIG, ICD 503, STIGs and associated NIST publications

• Experience with audit reviews such as physical security, network and system event logs, password administration, file access privileges, etc.

• Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication

• Ability to work independently and as a member of a team

• Self-motivated and possess exceptional written and verbal communication skills, particularly in documenting evaluation results

• Customer focused, adaptabl