Among information security analysts, AI is already used for a large share of the tasks. Measured exposure for information security analysts: 49% (high).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Job Title: Principal, Cyber Intelligence

Job Code: 41203

Job Location: Huntsville, AL

Job Schedule: 9/80: Employees work 9 out of every 14 days – totaling 80 hours worked – and have every other Friday off

Job Description:

The Missile Solutions Segment Security Organization has an opportunity for a Principal, Cyber Intelligence to lead the development, maintenance, and sustainment of cybersecurity initiatives supporting collateral classified and special access program systems across the segment footprint. The ideal candidate will maintain strong government relationships, independently lead Approval to Operate (ATO) strategy, identify and assess risk, prioritize remediation efforts, and drive issues to closure across a multi-program, multi-site environment.

Essential Functions:

Represent the organization during customer assessments, authorization reviews, audits, and other government engagements

May be appointed as ISSM for complex classified information systems.

Ensure coordination of information security initiatives with internal stakeholders, including Security, Information Technology, and Cyber Engineering, as well as external partners such as the DIB SCC, DSIE and information-sharing working groups, the DoD DIB CS/IA Program, and DCSA, to enable timely receipt of critical threat information and the development of cost-effective solutions to protect the corporation’s classified, controlled unclassified, and proprietary information.

Engage with our team of Cyber Security professionals and identify the right mix of tools and techniques to create scalable, secure and effective cyber security solutions.

Perform duties as subject matter expert to address requirements listed in the Joint Special Access Program (SAP) Implementation Guide (JSIG); 32 Code of Federal Regulation Part 117, National Industrial Security Program Operating Manual (NISPOM); Intelligence Community Directives (ICD); and the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM).

Identify training needs and develop curriculum to address gaps and create common skills by level.

Develop and publish information assurance policies for the Segment supporting alignment with corporate initiatives

Develop and review System Security Plans (SSP), all required supporting documentation/artifacts (POA&M, NSP, etc.), and local policies in accordance with the JSIG, NISPOM, ICD, and DCSA DAAPM.

Develop Cyber Security strategies and plans designed to protect Cloud based architecture and the use of Artificial Intelligence software.

Chair Information Security Working Groups at the Segment level

Drive process standardization across the segment.

Develop risk-based metrics and continuous monitoring strategies to measure health and effectiveness of the information assurance program

Examine the effect of government policy directives and identify corrective actions.

Develop scalable solutions for efficient management of Risk Management Framework (RMF) activities.

Perform periodic self-inspections, tests, and reviews of the Information Security program to ensure that systems are operating as authorized/accredited and implement corrective actions for any identified findings and vulnerabilities.

Develop and conduct test procedures for verification of RMF controls to meet customer requirements

Coordinate with Facility Security Officers (FSOs) and Contractor Program Security Officers (CPSOs) to define, implement and maintain information security policies, strategies, and procedures

Create and conduct Information System Security briefings

Ability to travel up to 25% to offsite locations as required

Qualifications:

Bachelor’s Degree with a minimum of 12 years of experience. Graduate Degree with a minimum of 10 years of prior related experience.

Active US Top Secret clearance

Preferred Additional Skills:

10+ years of experience as an information system security officer (ISSO) or information system security manager (ISSM) supporting classified programs

10+ years of experience utilizing security relevant tools, systems, and applications in support of Risk Management Framework (RMF) to include NESSUS, ACAS, DISA STIGs, SCAP, Audit Reduction, and HBSS.

10+ years of experience cybersecurity leadership overseeing programs and teams, authorizing risk decisions, coordinating stakeholders, and improving security and compliance.

10+ years of experience communicating complex technical risks, translating impact, and advising senior leaders.

Existing customer Authorizing Official – DIB peer relationships

SAP and or SCI information system management are desired.

Participation in national industrial security associations and working groups.

In-depth knowledge with the Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs)

Experience with NIST 800-53 Security Controls, ICD 503, and JSIG requirements/programs

Experience with Windows 7/10, Windows Server 2008/2012/2016, Active Directory, Group Policy, VMWare, Nutanix, and Citrix and cloud based security desired.

Technical knowledge of Linux, and UNIX based platforms desired