| The University of Washington (UW) is proud to be one of the nation's premier educational and research institutions. Our people are the most important asset in our pursuit of achieving excellence in education, research, and community service. Our staff not only enjoys outstanding benefits and professional growth opportunities, but also an environment noted for diversity, community involvement, intellectual excitement, artistic pursuits, and natural beauty. |
The Applied Physics Laboratory at the University of Washington (APL-UW) is a national center for advanced science and engineering research and development and education. APL-UW was formed in 1943 for the U.S. Navy to bring university research resources to bear on urgent WWII defense problems. APL-UW has developed an international reputation for its broad based programs in science, engineering and for designing, building, and deploying the advanced technology required to meet the research needs of numerous government and commercial sponsors. With modern facilities, equipment and over 350 talented researchers and staff, APL-UW provides a unique, dynamic work environment with many opportunities.
APL has an outstanding opportunity for a full time Information Systems Security Officer (ISSO).
Reporting through University of Washington Facility Security Officer (FSO) to the Applied Physics Laboratory University of Washington (APL-UW) Information Security Manager (ISSM), the incumbent will serve as the APL UW's Information Systems Security Officer (ISSO). As such the position will coordinate directly with the ISSM in managing all aspects of APL-UW's (and the University's) industrial security information systems security program, including but not limited to information system security operations, physical security as it relates to information systems security, compliance with federal policies and regulations, information systems security training, and other security issues as assigned.
The incumbent will efficiently manage APL-UW information system security resources while maintaining complete security compliance and effective systems. The primary job duties will be to assist in developing, implementing, and managing effective and efficient information system security practices that are compliant with continually evolving national security federal law, policy, regulations, and guidelines. The incumbent will continuously integrate information gathered from a variety of sources into APL-UW information systems security practices, coordinating with the ISSM and FSO to ensure consistency as appropriate across the broad University's industrial security program.
Technical Security Operations:
The incumbent works with the University's ISSM to ensure that the APL-UW's Secret Internet Protocol Routed Network (SIPRNet) enclave maintains compliance with Defense Information Systems Agency (DISA) requirements. The incumbent configures, updates, and monitors SIPRNet network/system infrastructure devices consisting of switches, routers, firewalls, intrusion detection/prevention components, and servers. The incumbent is responsible for the local Host Based Security System (HBSS) implementation and operation. The incumbent interfaces directly with the Computer Network Defense Service Provider (CNDSP) to provide support related to CNDSP subscription services. The incumbent will use tools authorized by DISA to test the system, i.e. ACAS vulnerability scanner, Security Technical Implementation Guide (STIG) compliance checker, and other DISA approved security tools. Maintains compliance records for SIPRNet network infrastructure using Continuous Monitoring and Risk Scoring web based system or other locally developed risk management tools. Completes required and recommended training activities necessary to maintain technical proficiency and required certifications at an administrator level.
Classified Security Systems:
The incumbent ensures that all remaining classified computing systems are established/maintained in compliance with Defense Security Service (DSS) requirements, that users are correctly following proper security procedures, and that all classified information systems are properly secured. The incumbent works collaboratively with the ISSM to develop, document and present information system security education, awareness and training; establish, document, implement, and monitor the industrial information systems security information systems program, ensuring compliance with federal policy and regulations; identify and document any unique information system security threats; conduct periodic information system self-inspections and coordinate corrective actions for all findings; conduct certification tests and certify to DSS that that all required information system protection measures are in place and provide the necessary protections; and other responsibilities described in applicable federal information system security requirement documents. The incumbent is responsible for ensuring weekly security checks of all accredited systems are completed. As necessary, the incumbent performs system administration functions for modern operating systems and applications, including but not limited to Microsoft Windows and Red Hat Enterprise Linux operating systems, such as installing and configuring operating systems, installing patches and updates, adjusting security controls to meet federal requirements, monitoring operation, and creating and managing system back-ups. The incumbent will ensure System Security Plans for all classified computing areas assigned to his/her responsibility are maintained.
Maintain the operation of the classified systems, ensuring that the systems are operating effectively, efficiently, and securely. Responsible for system baseline images; verifying system and application security configuration settings are compliant with existing DISA STIGs, SCAP Benchmarks, and software manufacturer security configuration guidance. The incumbent will remain available during core business hours to support users of classified or unclassified computing systems by providing guidance and training on security policy, plans and procedures; performing network and system administrator functions; ensuring critical information is backed-up; and adding or removing classified systems. For all active users, the incumbent verifies the clearance and need to use the systems assigned to his/her responsibility annually. Correct or mitigate any non-compliant security controls at the direction of the ISSM.
Perform a risk analysis on any security-relevant changes to the classified systems; providing recommendations and technical support that highlight the risk posed by vulnerabilities based on current and potential threats. Identify and analyze anomalies that are inconsistent with the current approved security plan. Monitor system, firewall, and IDS logs to identify and investigate anomalous access and other suspicious activities.
System Certification and Accreditation:
Implement network security, application security, access control and other security-related policies. Ensure Configuration Management (CM) for security-relevant IS software, hardware, and application is documented and maintained. Provide Certification and Accreditation (C&A) support, coordinating and managing all aspects of the C&A process for DoD, DSS, and other customer information systems security programs, ensuring compliance with government and university security policies and procedures.
Bachelor's Degree in Information Systems, Computer Science, Computer Engineering or Information Security strongly preferred and 4 years of relevant experience; OR equivalency to equal 7 years of progressively responsible experience as a Network Engineer, Network Administrator or System Administrator WITH the appropriate industry recognized certifications.
Must have at least 5 years experience working with DoD IA/Cybersecurity instructions (DIACAP or RMF).
Ability to acquire and maintain a Department of Defense SECRET personnel security clearance.
Must have a current DOD Approved 8570 Baseline Information Assurance Technical (IAT) Level II or III Certification (Ref: http://iase.disa.mil/iawip/Pages/iabaseline.aspx).
Must possess a technical proficiency with network routing and switching protocols.
Must possess a background in incident handling, response, and intrusion detection (IDS).
Ability to communicate effectively, both written and oral, with senior officials and with technical and non-technical audiences.
Demonstrated ability to work independently, make critical decisions, and work effectively with all levels of the organization.
Equivalent education/experience will substitute for all minimum qualifications except when there are legal requirements, such as a license/certification/registration. Experience working with Defense Information System Agency (DISA) Host Based Security System (HBSS) and DISA Assured Compliance Assessment Solution (ACAS).
Experience with creating detailed whitepapers on complex problems.
Experience in information system security and compliance programs at a research university.
Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).