Cyber Security Professional II/III

Clearance Requirement:   A current, active TS/SCI security clearance is required.

 

Ball Aerospace is powered by endlessly curious people with an unwavering mission focus. We pioneer discoveries that enable our customers to perform beyond expectation and protect what matters most. We create innovative space solutions, enable more accurate weather forecasts, drive insightful observations of our planet, deliver actionable data and intelligence, and ensure those who defend our freedom go forward bravely and return home safely.

 

At our core, we're passionate, committed people who believe together we can achieve extraordinary things. We work collaboratively with each other, our customers and partners to solve the world's greatest challenges. That means listening to one another, providing feedback and partnering across all levels. We value our inclusive culture where everyone is heard equally and creativity thrives. Each team member is fully invested in our mission and we bring an energy to work every day that propels our business and motivates us all to Go Beyond.®

 

For more information, visit Ball Aerospace Career Site or connect with us on LinkedIn, Facebook, Twitter or Instagram.

 

The Enterprise Assurance Strategic Capabilities Unit delivers critical assurance disciplines that protect and enable people, data and missions. We provide a comprehensive approach to managing risk across the enterprise for current and future information environments where the business and missions execute. We apply the use of innovative tools and robust processes to ensure mission and business success.

 

Cyber Security Professional II/III

 

Technical advisor for the Information Systems (IS) security requirements necessary for the protection of all sensitive information processed, stored, and/or transmitted through the use of the IS. Interprets government requirements, prepare, validate, and maintain documentation in support of the Risk Management Framework (RMF). Also implements and oversees the program security plans, policies, and procedures necessary to ensure compliance with all company and government requirements. Monitor the Ball Aerospace enterprise unclassified computer networks to detect, analyze, and respond to cyber security threats. Gather cyber threat intelligence, analyze information, conduct cyber forensics, conduct cyber threat hunting, and evaluate information to provide recommendations to support key Ball Aerospace decision makers to mitigate all cyber threats. 

 

What You’ll Do:

 

• Schedule, conduct, and administer security tests and evaluations programs to ensure that all the applicable IS are operating in accordance with security requirements.
• Maintain a configuration management system to track and control all components of IS used in support of programs.
• Identify, evaluate, and document all IS and provide guidance on what controls and countermeasures may be appropriate to mitigate vulnerabilities and threats.
• Perform audits of all IS, investigation anomalies, and record and report findings, as required. Coordinate and/or conduct detailed inquiries; assess potential damage; and develop, document, implement, and monitor corrective action plans. Perform data spill containment and clean up per customer direction.
• Ability to identify and respond to potential cyber threats to Ball Aerospace equities utilizing advanced software applications and information provided by government partners and open-source intelligence gathering.
• May coordinate the response and recovery activities from information security incidents. This includes collaboration with appropriate response partners, assist with determining the root cause of cyber incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures.
• May perform data breach response, cyber risk/security assessments, and remain involved in phases such as penetration testing, vulnerability scanning, and log configuration.
• May participate in engagements related to preemptive data breach response; analytic and reporting for litigation, data breaches, and regulatory response; workplace and employment issues, including theft of trade secrets; and investigations related to network breaches/unauthorized access of data through computer forensics and incident response.
• May perform duties as a cyber security threat hunter; track threat actors; responsible for reviewing system log events and data packets to proactively detect advanced threats that evade traditional security solutions; part