Information Systems Security Officer

Information Systems Security Officer (ISSO)

Pratt Miller is a product development company in motorsports, defense, and mobility industries providing clients with product engineering and low-volume production solutions. Our range of research & development, engineering, prototype manufacturing, test & validation, and low-rate production capability help our customers bring their high-quality products to market faster.

The Information Systems Security Officer (ISSO) is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM. The position should have the detailed knowledge and expertise required to manage the environment for information systems and, responsible for day-to-day security and monitoring for up-time and critical errors. This will include physical and environmental protection, incident handling, and system support. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries. This will include assessing the security impact of those changes and making recommendations to the ISSM. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. The role will also support information technology special projects and required systems that are dedicated to those projects including but not limited to hypervisor, application, network, support and general troubleshooting.

PLEASE NOTE THIS POSITION IS ONSITE IN NEW HUDSON, MI

Essential Functions and Skills

Typical responsibilities include, but are not limited to:

• Providing day-to-day operational support and troubleshooting for the application and infrastructure environment through system upgrades and performance management.
• Work on supporting a VDI environment (Citrix VMware/Nutanix), including deploying new hardware, supporting overall health of environment, and supporting virtual workstations and servers.
• Ensure appropriate operational security posture is maintained for an information system.
• Assist the ISSM in meeting duties and responsibilities.
• Prepare, review, and update authorization packages. Notify ISSM when changes occur that might affect the authorization determination of the information system(s).
• Conduct periodic reviews of information systems to ensure compliance with the security authorization package.
• Coordinate incident response activities with ISSM and Cybersecurity teams.
• Ensure all IS security-related documentation is current and accessible to properly authorized individuals.
• Identify cyber security vulnerabilities and assist with the implementation of patches or mitigations for them.
• Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change.
• Monitor system recovery processes to ensure security features and procedures are properly restored and function correctly.
• Configuration, certification, and auditing/analysis of Windows/Linux operating systems in Peer-to-peer, LAN, and WAN network environments

Additional Requirements

• Strong documentation skills for configurations, compliance evidence, and SOPs.
• Foundational understanding of network, operating systems, servers, security, and application management lifecycle.
• Execute the orchestration of job processing to enhance system performance.
• Ability to clearly explain complex security concepts to both technical and non-technical audiences.
• Collaborative and communicative, with consistent effectiveness working across disciplines.
• Be able to implement and maintain NIST 800-53 and NIST 800-171 controls in an environment.
• Auditing experience within the context of meeting government or defense compliance.
• Be able to run and understand security vulnerability reports and act on those to secure the environment appropriately.
• Experience with Windows workstation/server operating systems, Linux operating systems, and hypervisors.

Education / Certification / Years of Experience

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field; advanced degree preferred.
• Must meet the requirements for obtaining a U.S. Government clearance; active Secret or higher clearance preferred.
• Completed the Security+ Certification or working towards getting it within the first 90 days of employment.
• Experience with RMF, NIST 800-53, DFARS View phone number on click.appcast.io, CMMC Level 2, and NIST 800-171 compliance in defense or government environments.
• 1-5 years' experience within a defense contractor or equivalent environment managing IT systems and compliance process.

Pay Range:

$73,200.00 - $117,800.00

The above pay range reflects the minimum and maximum target pay for the position across all U.S. locations. Within this range, individual pay is determined by various factors, including the scope and responsibilities of the role, the candidate's experience, education and skills, as well as the equity of pay among team members in similar positions. Beyond offering a competitive total rewards package, we prioritize a people-first culture and offer various opportunities to support team member growth and success.

Oshkosh is committed to working with and offering reasonable accommodations to job applicants with disabilities. If you need assistance or an accommodation due to a disability for any part of the recruitment process, please contact our talent acquisition team by email View email address on click.appcast.io.

Oshkosh Corporation is a merit-based Equal Opportunity Employer. Job opportunities are open for application to all qualified individuals and selection decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristic. To the extent that information is provided or collected regarding categories as provided by law it will in no way affect the decision regarding an employment application.

Oshkosh Corporation will not discharge or in any manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with Oshkosh Corporation's legal duty to furnish information.

Certain positions with Oshkosh Corporation require access to controlled goods and technologies subject to the International Traffic in Arms Regulations or the Export Administration Regulations. Applicants for these positions may need to be "U.S. Persons," as defined in these regulations. Generally, a "U.S. Person" is a U.S. citizen, lawful permanent resident, or an individual who has been admitted as a refugee or granted asylum.