Information System Security Officer

MIT Lincoln Laboratory - Lexington, MA

Full-time - Mid Level

Remote - Lexington, MA

Professional, Scientific, and Technical Services

About the position

The Information System Security Officer (ISSO) at MIT Lincoln Laboratory is responsible for providing cybersecurity support to various independent Special Programs. This role involves ensuring compliance with cybersecurity policies, conducting risk assessments, and promoting security awareness within the organization. The ISSO will work closely with Program Managers and the Information System Security Manager to develop and maintain security plans, monitor vulnerabilities, and recommend resource allocations to secure critical data.

Responsibilities

• Assist and support compliance activities to ensure cybersecurity configurations are followed.
• Continuously validate the organization against cybersecurity policies and regulations for compliance.
• Ensure remediation plans are in place for vulnerabilities identified during assessments.
• Promote security awareness among management and align security principles with organizational goals.
• Conduct continuous monitoring and track audit findings, providing recommendations for mitigation.
• Recommend resource allocations for maintaining cybersecurity requirements.
• Provide technical documents and incident reports to stakeholders.
• Recognize and report possible security violations as required.
• Assist in the development and maintenance of System Security Plans and associated artifacts.
• Ensure systems are operated and disposed of according to security policies.
• Conduct periodic cybersecurity reviews of network and system vulnerabilities.
• Align IT security priorities with the overall security strategy.
• Prepare for and participate in compliance assessments.
• Interpret noncompliance patterns to assess risk and effectiveness of the cybersecurity program.

Requirements

• Current Top Secret Clearance
• U.S. Citizenship
• Successful background check and consent to a government polygraph examination
• Minimum of 4 years of IT security experience in DoD cybersecurity (preferred)
• Current Top Secret clearance with SCI eligibility (preferred)
• Possess a DoD 8570.01-M IAM I baseline certification (e.g. CompTIA Security+) or ability to obtain within 6 months of hire
• Demonstrated understanding of NIST 800-53, RMF, ICD 503, NISPOM Chapter 8, and DoD Manual 5205.07
• Experience in auditing, configuration, and vulnerability management
• Familiarity with multiple operating systems (Windows, Red Hat, Ubuntu, Mac)
• Experience with virtualization and Cloud technologies (preferred)
• Ability to integrate information security requirements into the acquisition process
• Technical experience securing networks and systems using DISA STIGs and/or SRGs
• Experience with vulnerability scanning and auditing tools
• Excellent written and verbal communication skills

Nice-to-haves

• Experience with virtualization and Cloud technologies
• Technical experience securing networks and systems utilizing DISA STIGs and/or SRGs

Benefits

• Comprehensive health, dental, and vision plans
• MIT-funded pension
• Matching 401K
• Paid leave (including vacation, sick, parental, military, etc.)
• Tuition reimbursement and continuing education programs
• Mentorship programs
• A range of work-life balance options