Isso Security Senior Analyst (Remote)

Date Posted:
2023-12-20
Country:
United States of America
Location:
PW208: Connecticut Remote Remote Location , Remote City, CT, 06035 USA
Position Role Type:
Remote
Pratt & Whitney is working to once again transform the future of flight-designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we're seeking the people to drive it. So, calling all curious.
Come ready to explore and you'll find a place where your talent takes flight-beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we'll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that's evolving fast to the future.
Innovation through diversity of thought. At Pratt & Whitney, we believe diversity of thought enables creativity, innovation, and a foundation for inclusion. By fostering an inclusive culture, we accept a shared accountability and responsibility to recognize, sponsor, coach, hire and promote talent equally. We welcome our employees to be their whole - best - selves at work because trust, respect and integrity, are a part of our DNA.
At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond?
We have an exciting remote opportunity for a ISSO Security Senior Analyst!
The ISSO Security Senior Analyst will work with the global technology teams at P&W to ensure that the cybersecurity requirements of information systems are met throughout the lifecycle of the systems.
Key Responsibilities:

• Collaborate with solution architects, developers, system administrators, information system owner (ISO) and project managers to help them satisfy the security requirements to attain an Authorization to Operate (ATO)
• Ensure that changes to Information Systems, its environment, and/or operational needs that may affect the authorization status are reported to the ISO and ISSO (Information Systems Security Officer)
• Translate security requirements into specific technical actions for IT staff
• Understand the requirements for Global Trade assessments and work with the team to complete the assessments
• Understand the requirements for Privacy Impact assessments and work with the team to complete the assessments
• Request and review vulnerability scans to satisfy the ATO requirements
• Coordinate Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities
• Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis, including network diagrams
• Gather required security control evidence to support the ATO process
• Ensure the removal and retirement of systems being decommissioned in coordination with the ISO and ISSO
• Provide ATO and NIST 800-171 guidance to system development teams to ensure accreditation success
• Maintain status of ATO packages and upcoming expiration
• Maintain close working relationship with ATO team

Basic Qualifications:

• Bachelor's degree and 5+ years of experience in Information Technology or Network Security; OR an Advanced degree and 3+ years of experience in Information Technology or Network Security; OR in lieu of a degree, candidates with 9+ years of experience in Information Technology or Network Security will be considered
• Must be a U.S. Citizen - this position may require access to systems/tools that are restricted to individuals who possess US citizenship

Preferred Qualifications:

• 5 or more years of experience in cybersecurity or Engineering or Aerospace industry
• Experience in systems security including but not limited to various computer hardware and software, operating systems, and application solutions in both a stand-alone and in LAN/WAN configurations
• Experience with information security toolsets such as anti-virus, vulnerability assessments, Multi Factor Authentication (MFA), and Security Incident and Event Management (SIEM)
• Understanding of computer architecture, computer networking, operating systems and fundamentals of computer and network security
• Experience with management of security frameworks, NIST 800-171 preferred
• Experience with vulnerability scanning, risk assessment and mitigation strategies
• Effectively works well with other employees
• Ability to work under pressure and time constraints
• Ability to work independently with limited supervision

What is my role type?
In addition to transforming the future of flight, we are also transforming how and where we work. We've introduced role types to help you understand how you will operate in our blended work environment. This role is:
Remote: Employees who are working in Remote roles will work primarily offsite (from home).
Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility.
*This requisition is eligible for an employee referral award. ALL eligibility requirements must be met to receive the referral award.
The salary range for this role is 77,000 USD - 163,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms