What are the responsibilities and job description for the Information System Security Officer position at Massachusetts Institute of Technology (MIT)?
The Security Department's overall mission is to identify and counter security threats to the MIT Lincoln Laboratory's mission of development of game-changing technology in support of National Security, including guarding against compromise by foreign intelligence agencies and insider threats. To accomplish this mission, this department formulates and implements policies, plans, and actions designed to protect facilities against threats of vandalism, accidental destruction, and sabotage; and safeguards personnel, classified and unclassified information systems, personal identifiable information, property, and other assets from exploitation and recruitment by foreign intelligence agencies.
We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Department encourages flexible schedules and hybrid remote work arrangements.
Who are we?
MIT Lincoln Laboratory (MIT LL) is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.
* Mission - The Security Department's (SD) overall mission is to identify and counter security threats to the MIT LL's mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
* Culture - We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds.
What will you do?
Provide information systems security support to several independent MIT LL programs.
* Assist in the security configuration and management of collateral classified systems and networks in a variety of traditional and virtual environments including Linux, Unix, Sun, Mac, and Windows.
* Assist the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report (RAR), and Continuous Monitoring Strategy.
* Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures.
* Collect, analyze, and store system audit records.
* Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
* Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
* Prepare for and participate in periodic organization compliance assessments.
* Ensure account management documentation is complete and updated.
* Maintain configuration management documentation (change tracking, maintenance logs, etc.).
* Serve as a member of the Configuration Control Board (CCB) as needed.
How will you grow?
You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.
* Leadership: Room to advance on your team or to lead cross-functional projects.
* Growth Opportunities: Potential for lateral and vertical movement.
* Education/Training: Management training, mentorship, in-house and external courses.
* Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
* Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.
What you need/Requirements:
To work with MIT LL, all employees must meet certain basic requirements.
* Selected candidate will be subject to a pre-employment background investigation and must possess and maintain a current in scope Secret level DoD security clearance
* Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Top Secret level DoD security clearance
* Successfully pass a background check and must meet all eligibility requirements for access to classified information.
* BS degree in Computer Science, Information Technology, Computer Information Systems, or related discipline is preferred
* A minimum of 4 years of IT security experience in DoD Industrial Security is preferred
* Possess a DoD 8570.01-M IAM I baseline certification (e.g. CompTIA Security ), or be able to obtain one within 6 months of hire
* Technical experience, skills, and course work completed towards an Undergraduate Degree, or industry IT certifications may be considered in lieu of education or DoD security experience requirements
* Familiarity with the National Industrial Security Program Operating Manual (NISPOM), Defense Counterintelligence Security Agency (DCSA) Assessment and Authorization Guide (DAAG), and NIST Risk Management Framework (RMF) is required
* Experience and familiarity with multiple operating systems such as Windows Server 2012 and 2016, Windows 7 and 10, Red Hat Enterprise Linux, Ubuntu, Mac, etc.
* Experience with virtualization technologies is preferred
* Technical experience securing networks and systems utilizing DISA Security Technical Implementation Guides (STIGs) and/or SRGs is highly desired
* Demonstrated experience with vulnerability scanning and auditing tools and processes is required
* Excellent written and verbal communication skills are required
Ideally, you will have:
The Laboratory values experiences from diverse backgrounds and occupations. The most successful candidates will have the following skills and qualifications.
* Strong interpersonal skills and be able to manage stress in a professional manner.
* Knowledgeable in computer security principles and policies, to include the RMF, STIGs, NISPOM, and DAAG.
* Strong technical skills and be able to respond to off-hours emergencies.
* Position requires occasional local and overnight travel.
Hiring Range: $95,700 - $126,700
Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including-but not limited to-the scope and responsibilities of the role, the candidate's experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.
At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:
Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks.
Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.
MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.
Requisition ID: 43512
We foster a culture where security professionals are empowered to solve complex security problems in close collaboration with Laboratory research teams and Government counterparts. Our people are our most important resource, and we encourage a casual and flexible opportunity-filled working environment that is technology-focused. Where mission needs can be met, the Security Department encourages flexible schedules and hybrid remote work arrangements.
Who are we?
MIT Lincoln Laboratory (MIT LL) is a Federally Funded Research and Development Center (FFRDC) whose mission is research in support of National Security.
* Mission - The Security Department's (SD) overall mission is to identify and counter security threats to the MIT LL's mission of development of game-changing technology in support of national security, including guarding against compromise by foreign intelligence agencies and insider threats.
* Culture - We foster an inclusive, opportunity-filled environment of empowered team members from diverse backgrounds.
What will you do?
Provide information systems security support to several independent MIT LL programs.
* Assist in the security configuration and management of collateral classified systems and networks in a variety of traditional and virtual environments including Linux, Unix, Sun, Mac, and Windows.
* Assist the Information System Security Manager (ISSM) in the development and maintenance of System Security Plans (SSP) and associated artifacts such as the Plan of Action & Milestones (POA&M), Risk Assessment Report (RAR), and Continuous Monitoring Strategy.
* Ensure systems are operated, maintained, and disposed of in accordance with organization security policies and procedures.
* Collect, analyze, and store system audit records.
* Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
* Conduct network, system, and application vulnerability scanning, configuration assessment, and remediation.
* Prepare for and participate in periodic organization compliance assessments.
* Ensure account management documentation is complete and updated.
* Maintain configuration management documentation (change tracking, maintenance logs, etc.).
* Serve as a member of the Configuration Control Board (CCB) as needed.
How will you grow?
You will find significant opportunities to do meaningful work in an environment intentionally designed to be one where you will learn, thrive and belong.
* Leadership: Room to advance on your team or to lead cross-functional projects.
* Growth Opportunities: Potential for lateral and vertical movement.
* Education/Training: Management training, mentorship, in-house and external courses.
* Exposure: Engagement with sponsors, stakeholders, Laboratory leadership and other Departments and Divisions.
* Community: Participation is encouraged for Laboratory social events, Employee Resource Groups (ERGs), clubs and study groups, volunteering and community service projects.
What you need/Requirements:
To work with MIT LL, all employees must meet certain basic requirements.
* Selected candidate will be subject to a pre-employment background investigation and must possess and maintain a current in scope Secret level DoD security clearance
* Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Top Secret level DoD security clearance
* Successfully pass a background check and must meet all eligibility requirements for access to classified information.
* BS degree in Computer Science, Information Technology, Computer Information Systems, or related discipline is preferred
* A minimum of 4 years of IT security experience in DoD Industrial Security is preferred
* Possess a DoD 8570.01-M IAM I baseline certification (e.g. CompTIA Security ), or be able to obtain one within 6 months of hire
* Technical experience, skills, and course work completed towards an Undergraduate Degree, or industry IT certifications may be considered in lieu of education or DoD security experience requirements
* Familiarity with the National Industrial Security Program Operating Manual (NISPOM), Defense Counterintelligence Security Agency (DCSA) Assessment and Authorization Guide (DAAG), and NIST Risk Management Framework (RMF) is required
* Experience and familiarity with multiple operating systems such as Windows Server 2012 and 2016, Windows 7 and 10, Red Hat Enterprise Linux, Ubuntu, Mac, etc.
* Experience with virtualization technologies is preferred
* Technical experience securing networks and systems utilizing DISA Security Technical Implementation Guides (STIGs) and/or SRGs is highly desired
* Demonstrated experience with vulnerability scanning and auditing tools and processes is required
* Excellent written and verbal communication skills are required
Ideally, you will have:
The Laboratory values experiences from diverse backgrounds and occupations. The most successful candidates will have the following skills and qualifications.
* Strong interpersonal skills and be able to manage stress in a professional manner.
* Knowledgeable in computer security principles and policies, to include the RMF, STIGs, NISPOM, and DAAG.
* Strong technical skills and be able to respond to off-hours emergencies.
* Position requires occasional local and overnight travel.
Hiring Range: $95,700 - $126,700
Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including-but not limited to-the scope and responsibilities of the role, the candidate's experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.
At MIT Lincoln Laboratory, our exceptional career opportunities include many outstanding benefits to help you stay healthy, feel supported, and enjoy a fulfilling work-life balance. Benefits offered to employees include:
- Comprehensive health, dental, and vision plans
- MIT-funded pension
- Matching 401K
- Paid leave (including vacation, sick, parental, military, etc.)
- Tuition reimbursement and continuing education programs
- Mentorship programs
- A range of work-life balance options
- ... and much more!
Please visit our Benefits page for more information. As an employee of MIT, you can also take advantage of other voluntary benefits, discounts and perks.
Selected candidate will be subject to a pre-employment background investigation and must be able to obtain and maintain a Secret level DoD security clearance.
MIT Lincoln Laboratory is an Equal Employment Opportunity (EEO) employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability status, or genetic information; U.S. citizenship is required.
Requisition ID: 43512
Salary : $95,700 - $126,700