Information Systems Security Officer

At BWX Technologies, Inc. (NYSE: BWXT), we are People Strong, Innovation Driven. A U.S.-based company, BWXT is a Fortune 1000 and Defense News Top 100 manufacturing and engineering innovator that provides safe and effective nuclear solutions for global security, clean energy, environmental restoration, nuclear medicine and space exploration. With more than 7,800 employees, BWXT has 14 major operating sites in the U.S., Canada and the U.K. We are the sole manufacturer of naval nuclear reactors for U.S. submarines and aircraft carriers. Our company supplies precision manufactured components, services and fuel for the commercial nuclear power industry across four continents. Our joint ventures provide environmental restoration and operations management at a dozen U.S. Department of Energy and NASA facilities. BWXT’s technology is driving advances in medical radioisotope production in North America and microreactors for various defense and space applications. For more information, visit www.bwxt.com. Follow us on LinkedIn, X, Facebook and Instagram.

Welcome to BWXT

We believe in empowering our employees and cultivating a dynamic workplace that fosters growth and collaboration. Whether you’re an experienced professional or just starting your career, you'll find opportunities to challenge yourself, learn from seasoned experts, and contribute to nuclear innovation. We require a diverse range of skills to support our work in the markets that drive our business and welcome candidates from all backgrounds and life stages who are passionate about making a difference.

Position Overview:

The Information Systems Security Officer (ISSO) will be responsible for ensuring development and proper implementation of the security controls documented in the System Security Plan (SSP) for all information systems for which the ISSO is responsible, including sensitive networks and National Security Systems supporting business, special purpose, and security functions. The ISSO provides certification documentation to the Information Systems Security Manager (ISSM) for all information system accreditations and performs other duties as required to implement the Cyber Security programs necessary to support U.S. Government regulatory requirements, (DOE/NNSA, NRC, etc.).

Location:

Onsite in Oak Ridge, TN

Your Day to Day as an Information Systems Security Officer:

• Ensure implementation of protection measures documented in the SSP for each information system for which they are the ISSO.
• Maintain the SSP and associated artifacts, including risk assessments, Privacy Impact Assessments, vulnerability assessments, Plans of Action and Milestones POA&Ms, etc.
• Ensure that security controls for information system resources are based on the least privilege principle and develop alternative solutions to mitigate risk when the most desirable security controls cannot be fully implemented.
• Identify, in coordination with the ISSM, and document in the SSP, unique threats to information systems for which they are responsible.
• Provide technical assistance with the initial set-up, secure deployment, and proper management of systems that support information security including virus detection, application whitelisting, centralized logging, data loss prevention, and intrusion detection systems.
• Perform risk assessments and tests of new technology platforms and leads the implementation of standard security configurations, ex: DISA STIG, CIS Benchmarks, etc., prior to production deployment.
• Utilize vulnerability assessment software and related tools to immediately highlight errors in systems configuration, the need for the update of software with fixes and patches, and other security related changes.
• Ensure the implementation of procedures as defined in the Cyber Security Risk Management Plan (CSRMP) and the SSP for each information system for which they are the ISSO.
• Serve as an active member of the Cyber Security Incident Response Team CSIRT and participates in security incident response efforts by directing first responders to triage an event and performing advanced response actions for escalated events.
• Ensure that information access controls and cyber protection measures are implemented for each information system as described by the SSP.
• Ensure that users and System Administrators are properly trained in information system security by identifying cyber security training needs and the personnel who need to attend the cyber security training program.
• Support awareness training of the workforce on information security standards, policies, and best practices.
• Conduct cyber security reviews and test to ensure that cyber security features and controls are functioning and effective.
• Perform administration of the centralized logging platform, develop custom dashboards to monitor security status of the environment, and produce periodic reports of key performance indicators and key risk indicators to support Cyber Security metrics at the executive and operational levels.
• Redesign and reengineer internal information handling processes so that information is appropriately protected from a wide variety of problems including unauthorized disclosure, unauthorized use, inappropriate modification, premature deletion, and unavailability.
• Develop technical documentation describing the deployment, configuration, and management of shared, networked, and multi-user information security systems.
• Regularly attend conferences, professional association meetings, and technical symposia to remain aware of the latest information security technological developments.

Required Minimum Qualifications:

• Bachelor’s degree in a related Information Technology field.
• At least 5 years of related experience.
• Prior relevant experience will include performing risk assessments, developing security plans, implementing DISA STIGs, and developing Standard Security Configuration Guides or similar technical products.
• Advanced technical skills and experience with the following: Splunk administration, network intrusion detection system (IDS) administration, Active Directory and Group Policy Objects, Anti-virus administration consoles, Data Loss Prevention (DLP) systems, Microsoft Windows operating systems, Linux operating systems and advanced cyber security toolkits, malware analysis, penetration testing, and digital forensics tools.
• Understanding of open-source and other tools to assist in detection, prevention and analysis of security threats.
• Working knowledge of system functions, cyber security policies, and cyber security protection requirements.
• Excellent communications skills, especially technical report writing.
• Currently hold, or be able to obtain, a relevant active information security certification, such as GSEC, CEH, CISSP, CISA, GCIH, OSCP, etc.
• Must be able to maintain confidentiality when working with sensitive information.
• Must be a U.S. citizen.
• Must be able to obtain and maintain a U.S. Department of Energy (DOE) Q clearance.

Preferred Additional Qualifications:

• Master’s degree in computer information systems, information technology, cybersecurity, or related field.
• Experience supporting Department of Energy (DOE) and National Nuclear Security Administration (NNSA) cyber security systems and infrastructure.
• Familiarity with DOE and NNSA cyber security directives, policies, and accreditation processes.
• Active DOE “Q” Clearance.
• COMSEC Account Manager (CAM) experience.
• Experience in nuclear, national security, or critical infrastructure industries.
• Knowledge of Operational Technology (OT), DCS, or industrial control system cybersecurity.

What We Offer:

• Competitive salary and benefits package, including health, dental, and retirement plans.
• Flexible work schedules and paid time off to promote a healthy work-life balance.
• Professional development opportunities, including mentorship programs and sponsorship for continuing education.
• An inclusive atmosphere that celebrates new perspectives and supports collaboration between different generations.
• The chance to be part of a mission-driven organization making a positive impact on the future of energy.
• Opportunities for continuous learning and training to grow throughout your career!

Pay: $70,000 - $103,000

The base salary range for this position in Tennessee (US-TN) at the start of employment is expected to be between $70,000 and $103,000 per year. However, the base salary offered is based on local job market factors, and may vary further depending on factors specific to the selected job candidate, such as job-related knowledge, skills, experience, and other objective business considerations. Subject to these considerations, the total compensation package for this position may also include other elements, such as an annual cash incentive in addition to a full range of medical, retirement, and/or other benefits. Details of participation in these benefit plans will be provided at such time the selected job candidate receives an offer of employment. If hired, the selected job candidate will be employed 'at-will,’ unless employed at a location and in a position subject to a collective bargaining agreement. The company further reserves the right to modify base salary (as well as any other discretionary payment, compensation or benefit program) at any time, including for reasons related to individual performance, company or individual department/team performance, and other market factors.

As a federal government contractor, BWX Technologies, Inc. and any subsidiaries, affiliates and related entities (“BWXT” or the “Company”) complies with all federal, state, and local laws and customer requirements regarding health and safety protocols. As such, all BWXT new hires will be required to adhere to applicable Company health and safety requirements within the workplace as a condition of employment.

All candidates must be U.S. citizens. Selected applicants are required to successfully complete a pre-employment check and drug screening. In addition, the position may require the ability to obtain and maintain applicable federal eligibility requirements for access to classified/sensitive information or matter which involves an extensive criminal and financial background investigation, drug test, previous employment, and reference verifications.

BWXT is committed to the concept of Equal Employment Opportunity. We have established procedures to ensure that all personnel actions such as recruitment, compensation, career development, benefits, company-sponsored training and social recreational programs are administered without regard to race, color, religion, sex, national origin, citizenship, age, disability, protected veteran or other protected status.

BWX Technologies, Inc. and its affiliates and subsidiaries (BWXT) is not responsible for and does not accept any liability for fees or other costs associated with resumes or candidates presented by recruiters or employment agencies, unless a binding, written recruitment agreement between BWXT and the recruiter or agency exists prior to the presentation of candidates or resumes to BWXT and includes the specific services, job openings, and fees to be paid (“Agreement”). BWXT may consider any candidate for whom a recruiter or agency has submitted an unsolicited resume and explicitly reserves the right to hire such candidate(s) without any financial obligation to the recruiter or agency unless an Agreement is in place prior to presentation and such Agreement explicitly encompasses the job opening for which such fees or costs are sought. An email, verbal or other informal contact with any person within BWXT will not create a binding agreement. Agencies or recruiters without an Agreement are directed not to contact any hiring managers of BWXT with recruiting inquiries or resumes. Recruiters and agencies interested in partnering with BWXT may contact BWXT’s Talent Acquisition team at talent_acquisition@bwxt.com.