Job Description

This is a full time opportunity with the Georgia Tech Research Institute (GTRI) Research Security, located in Atlanta, Georgia. The position is for an Information Systems Security Officer (ISSO) who has interest in intellectually challenging and rewarding work. This position will be responsible for maintaining the operational security posture for information systems and researching methods to protect our nation's data from ever-increasing threats. The ISSO researches, develops, implements, tests and reviews GTRI's information security in order to protect classified information and prevent unauthorized access. The ISSO informs users about security measures, explains potential threats, raises information security awareness and monitors networks. The ISSO assists the ISSM for the implementation of the RMF in assessment and accreditation of information systems and serves as the principal advisor on all matters, technical and
otherwise, involving the security of systems under their purview. We value bright, intellectually curious, growth oriented professionals and provide a work environment that allows for work/life balance and opportunity for growth.

Job Duties:

• Manage system security requirements for GTRIs information systems and assure continuous system compliance
• Manage the day-to-day security operations of systems, associated media, and networks
• Responsible maintaining operational security posture for systems by enforcing established security policies, procedures, and standards.
• Develop and maintain documentations including, but not limited to: Systems Security Plans (SSPs), Risk Assessment Reports, Plan of Actions & Milestones (POA&M), and Enterprise Mission Assurance Support Service (eMASS) or Xacta artifacts
• Work with Government security cognizant agencies to identify and manage security findings, risks and mitigations in Plan of Action and Milestones (POA&M)
• Educate end-users by providing formal training and support end-users during day-to-day operations as the cybersecurity Subject Matter Expert (SME)
• Perform continuous monitoring activities including system security audits and vulnerability scanning and remediation.
• Ensure Configuration Management (CM) of all associated software, hardware, and security relevant functions
  Identify security deficiencies/discrepancies, research and recommend security solutions to the Information Systems Security Manager (ISSM)
• Lead incident response process to include document and report to appropriate authority
• Have proficiency across several technical domains and experience with National Industrial Security Program Operating Manual (NISPOM), DCSA Assessment and Authorization Process Manual (DAAPM), Joint Special Access Program (SAP) Implementation Guide (JSIG), Intelligence Community Directive (lCD) 503, National Institute of Standards and Technology (NIST) 800, and Risk Management Framework (RMF).
• Research policies and regulations, productively interact with various agencies and levels of management, and contribute to establishing and maintaining accredited information systems.
• Research system vulnerabilities and threats to stay on top of the continuous threat against accredited systems
• Prepare for and participate in self-inspection and Government security vulnerability assessments

Travel Requirements

<10% travel

Education & Length of Experience

Research Associate I

• A Bachelor's degree in Computer Engineering, Electrical Engineering, Computer Science, Cyber Security, Information Assurance, Information Security or related fields.

Research Associate II

• A Masters degree in Computer Engineering, Electrical Engineering, Computer Science, Cyber Security, Information Assurance, Information Security or related fields and three (3) years of relevant full-time experience after completion of that degree,
• A Masters degree in Computer Engineering, Electrical Engineering, Computer Science, Cyber Security, Information Assurance, Information Security or related fields and five (5) years of relevant full-time experience after completion of a Bachelors degree, or
• A Doctoral degree in Computer Engineering, Electrical Engineering, Computer Science, Cyber Security, Information Assurance, Information Security or related fields.

Required Minimum Qualifications

• U.S. Citizen with the ability to obtain Secret security clearance within 6 months
• Bachelor degree in Computer Engineering, Electrical Engineering, Computer Science, Information Assurance, Information Security or related fields.
• DoD Directive 8140/8570, IAM Level II baseline certifications are required for this position within six months of hire. Must possess or be able to maintain a CISSP or Security + certification within six months of hiring.
• Have experience with RMF, NIST 800, NISPOM and DAAPM
• Experience with or have worked as most of the following: Linux Administrator, Windows Administrator (all OSs including legacy systems), Generic/Proprietary System Administrator, Information System Auditor, Information Systems Security Officer/Engineer,
• Data Security Analyst.
• Experience with Incident Response Team
• Experience identifying system vulnerabilities and implementing mitigation strategies.

Preferred Qualifications

• An active Secret Clearance
• DoD8140/8570 IAM Level III compliance with CISSP
• Excellent written and verbal communication skills at all levels of an organization
• Experience in an environment and culture steeped in teamwork and collaboration working on challenging technical projects
• Experience working with eMASS

U.S. Citizenship Requirements

Due to our research contracts with the US federal government, candidates for this position are required to be US Citizens.

Clearance Type Required

Ability to obtain Secret Clearance upon hire

Diversity & Inclusion

Diversity & Inclusion (D&I) at Georgia Tech Research Institute aims to enhance the Institutes mission of solving the worlds most complex technical problems by creating a workforce with a shared appreciation for diversity, raising awareness around inclusiveness, and fostering a sense of belonging and appreciation for all members of our community.

Equal Employment Opportunity

Georgia Tech Research Institute is an Equal Opportunity Employer of individuals with disabilities and protected veterans and actively seeks diversity among its employees. Equal Employment Opportunity is the Law.