Role overview
About this role
<p>The Boeing Company is looking for a highly motivated <b><b>Senior Cyber Security Specialist</b></b> to join our Enterprise Government Cybersecurity team based in Huntsville, Alabama.</p><p></p><p>The candidate will rely on their cybersecurity and Information Assurance (IA) background to support Boeing customers in meeting National Industrial Security Program Operating Manual (NISPOM), Joint Special Access Program (SAP) Implementation Guide (JSIG) and Intelligence Community Directive (ICD) requirements.</p><p><br /><b><b>Position Responsibilities:</b></b></p><ul><li><p>Rely on cybersecurity and technical background to perform security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and government standards</p></li><li><p>Implement the Authorization and Assessment (A&A) process under the Risk Managed Framework (RMF) for new and existing information systems, to include facilitating Memorandums of Understanding (MOU), Interconnection Security Agreements (ISA), Risk Acceptance Letters (RAL) and support Continuous Monitoring (CONMON)</p></li><li><p>Conduct compliance review of operating systems (i.e., Windows, Linux, and Solaris) to governing requirements</p></li><li><p>Assess test/analysis data to document state of compliance with security requirements;</p></li><li><p>Conduct risk assessments and investigations, execute appropriate risk mitigations, and oversee incident response activities</p></li><li><p>Interface with the appropriate government customers, suppliers, and company personnel to implement protective mechanisms and to ensure understanding of and compliance with cybersecurity requirements</p></li><li><p>Communicate with team leaders, managers and internal employees in the decision-making process to obtain needed information, make the most appropriate decisions, and ensure buy-in and understanding of resulting decisions</p></li><li><p>Proactively determine project or assignment requirements by breaking them down into tasks and identifying types of equipment, materials, and people needed</p></li><li><p>Consistently and proactively identifies more critical and less critical activities and assignments and effectively adjust priorities when appropriate</p></li><li><p>Set high expectations for oneself, has the courage to raise the bar continuously</p></li><li><p>Holds oneself and others accountable for continuous improvement and communicate expectations directly, openly and effectively</p></li><li><p>Conveys sense of purpose and mission that motivates others, maintains direction, and balances big-picture concerns with day-to-day issues</p></li><li><p>Guide others in creating relevant options for addressing problems/opportunities and achieving desired outcomes</p></li><li><p>Assessment, authorization, verification, validation, certification and qualification processes and procedures, including knowledge of current governing regulations and compliance requirements; advanced level of understanding and proficiency in the use of networking computing hardware and software applications; extensive knowledge of processes and tools needed to maintain, archive, and retrieve digital files; as it relates to cybersecurity</p></li></ul><p></p><p><b>This position requires an active U.S. Secret Security Clearance (U.S. Citizenship Required). (A U.S. Security Clearance that has been active in the past 24 months is considered active.)</b></p><p><br /><b>BasicQualifications (Required Skills/Experience):</b></p><ul><li><p>IAM Level 1 DoD 8140.01 (previously 8570.01) compliant certification (i.e. CAP, GSLC, Security+ CE, CISSP, CASP, CISM, GSLC)</p></li></ul><p></p><p><b>Preferred Qualifications (Desired Skills/Experience):</b></p><ul><li><p>Bachelors Degree or higher </p></li><li><p>Currently hold certification in good standing to satisfy IAM Level III (CISSP, GSLC or CISM)</p></li><li><p>Experience in utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include: NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS</p></li><li><p>Experience with policies and implementation of Risk Management Framework (RMF): e.g. DAAPM, ICD-503, JSIG, and NIST 800 series special publications</p></li><li><p>Experience in assessing and documenting test or analysis data to show cybersecurity compliance</p></li><li><p>Demonstrated knowledge of processes and tools to maintain, archive, sanitize, and retrieve digital files</p></li><li><p>Demonstrated experience with performing security compliance monitoring and security policy assessments/audits</p></li><li><p>Ability to read and understand contracts, Statements of Work (SoW), and DD-254s</p></li><li><p>Experience with eMASS</p></li></ul><p></p><p><b>Typical Education/Experience:</b></p><p>Education/experience typically acquired through advanced technical education (e.g. Bachelor) and typically 9 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+4 years' related work experience, Master+7 years' related work experience, 13 years' related work experience, etc.).</p><p></p><p><b>Relocation:</b></p><p>Relocation assistance is not a negotiable benefit for this position. Candidates must live in the immediate area or relocate at their own expense.</p><p></p><p><b>Drug Free Workplace:</b></p><p>Boeingis a Drug Free Workplace where post offer applicants and employees are subject to testing for marijuana, cocaine, opioids, amphetamines, PCP, and alcohol when criteria is met as outlined in our policies.</p><p></p><p><b>Work shift:</b></p><p>This position will be for 1st shift.</p><p></p>