Supervisor 2, Information System Security Manager

The Supervisor 2, Information Systems Security Manger (ISSM) will lead the Information Assurance (IA) efforts for multiple Department of Defense (DoD) and/or Special Program information systems. The Supervisor 2, ISSM manages Information System Security Officers and/or Information System Security Managers (ISSM 1s) as direct reports to achieve favorable authorization decisions. The Supervisor 2, ISSM performs the development, implementation, and evaluation of classified information systems for assigned programs in compliance with the Risk Management Framework (RMF) as outlined in either the DAAG, JSIG, or ICD 503., * Use cyber defense tools for continuous monitoring and analysis of systems to identify malicious activity.

• Document and escalate incidents that may cause ongoing and immediate impact to the environment.
• Perform cyber defense trend analysis and reporting.
• Work with stakeholders to resolve computer security incidents and vulnerability compliance.
• Provide advice and input for Disaster Recovery, Contingency, and Continuity of Operations Plans.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Perform risk analysis whenever an application or system is implemented or changed.
• Ensure successful implementation and functionality of security requirements and appropriate IT policies and procedures.
• Leads assigned team to facilitate effective execution of the Risk Management Framework (RMF).
• Mentor and train Information System Security Officer personnel.
• Perform other duties as assigned.

• Ability to configure and review security functions of information systems.
• Ability to conduct security analyses, including security configurations and risk assessments.
• Ability to lead a team of Information System Security Officers and monitor performance.
• Familiarity working with DoD/IC Security Control Assessors.
• Familiarity with C2G/C2C interconnected systems and/or Wide Area Network (WAN) environments.
• Understanding of virtual environments and containerization tools/technologies.
• Ability to identify systemic security issues based on the analysis of vulnerabilities and configuration data.
• Ability to apply techniques for detecting host and network based intrusions using intrusion detection technologies.
• Ability to function effectively in a dynamic, fast paced environment.
• Strong interpersonal skills with effective verbal and written communication skills.
• Clear and structured thought processes and coherent decision making skills., * Bachelors Degree in Computer Science/Cybersecurity/Information Technology or equivalent field of study required., * 3-5 years of experience as an ISSM, or performing as an ISSO, implementing DCSA Assessment and Authorization Process Manual (DAAG), DoD Joint Special Access Program Implementation Guide (JSIG), and/or Intelligence Community Directive (ICD) 503 Risk Management, Certification and Accreditation requirements.

Draper is an independent, nonprofit research and development company headquartered in Cambridge, MA. The 2,000+ employees of Draper tackle important national challenges with a promise of delivering successful and usable solutions. From military defense and space exploration to biomedical engineering, lives often depend on the solutions we provide. Our multidisciplinary teams of engineers and scientists work in a collaborative environment that inspires the cross-fertilization of ideas necessary for true innovation. For more information about Draper, visit www.draper.com., Our work is very important to us, but so is our life outside of work. Draper supports many programs to improve work-life balance including workplace flexibility, employee clubs ranging from photography to yoga, health and finance workshops, off site social events and discounts to local museums and cultural activities. If this specific job opportunity and the chance to work at a nationally renowned R&D innovation company appeals to you, apply now www.draper.com/careers.