Post job

Information security analyst jobs in Santa Barbara, CA - 21 jobs

All
Information Security Analyst
Information Systems Security Officer
Senior Security Analyst
Senior Information Security Analyst
Information Technology Analyst
Security Engineer
  • Sr Anlyst, Security - Goleta, CA

    Raytheon 4.6company rating

    Information security analyst job in Goleta, CA

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: DoD Clearance: Secret At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our Senior Security Analyst provides industrial security support within the following areas: clearance processing, visit certifications, document control, and physical security, including alarm response for Open Storage Areas. You will make critical security decisions concerning high value contracts and implement security procedures that will prevent unauthorized access to company and government facilities or information. What You Will Do Administrative duties of administering security clearance briefings to employees who are granted a security clearance Debriefing Personal upon notification of Retirement/Termination Continuously evaluates compliance of personnel security activities with security requirements Conduct security self-inspections, program security reviews, apply risk mitigation methodologies, support customer assessments, and implement security measures to meet requirements Administer day-to-day security programs, personnel processing, program reviews, document control system, audits & self-inspections, violation investigations & reports, receipt/dispatch/destruction/mail logs, visit certs, etc. Analyze security issues/problems and provide focused solutions Solve routine problems of limited scope and complexity Willing to work extended hours, in a fast paced, driven environment Must possess a valid driver's license Qualifications You Must Have Typically requires a Bachelor's degree and 2 years relevant experience OR in absence of a degree, 6 years relevant experience. Active and transferable U.S. government issued SECRET security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. Experience with any of the following: NISPOM, ICD 705, or experience working in a classified environment. Qualifications We Prefer Ability to solve routine problems of limited scope and complexity Self-starter with minimal supervision Willing to work extended hours, in a fast paced, driven environment Able to perform well in fast-paced, multi-task environment Great attention to detail Strong organizational and interpersonal skills Customer service oriented Team player What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. Relocation Non-Eligible - Relocation assistance not available . Learn More & Apply Now! Please consider the following role type definition as you apply for this role. ‒ Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 72,000 USD - 144,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $99k-128k yearly est. Auto-Apply 60d+ ago
  • Job icon imageJob icon image 2

    Looking for a job?

    Let Zippia find it for you.

  • Information Security Risk Specialist

    American Riviera Bank

    Information security analyst job in Santa Barbara, CA

    About the Role:
    $93k-137k yearly est. Auto-Apply 12d ago
  • Information Security Analyst

    Mount Indie

    Information security analyst job in Camarillo, CA

    Job Description Mount Indie is seeking a highly skilled and experienced Cyber Accreditation Specialist with 5+ years of experience for Department of Defense (DoD) programs at the Naval Base Point Mugu located near Camarillo, CA. The Cyber Accreditation Specialist will be responsible for the development, coordination, and maintenance of cyber accreditation packages, primarily focusing on Risk Management Framework (RMF) artifacts, inheritance mapping, and Plan of Action & Milestones (POA&M) management supporting the Navy's Authority To Operate initiatives. This role ensures compliance with relevant DoD and federal cybersecurity guidelines and contributes to our organization's mission support objectives by securing critical Navy information systems. Responsibilities Cyber Accreditation Package Development: Develop and maintain RMF artifacts, including System Security Plans (SSP), generate & control implementation evidence, inheritance maps, and POA&Ms Coordination and Compliance: Coordinate with Authorizing Officials (AO) and Information System Security Managers (ISSM) to define an Authority to Operate (ATO) plan, develop an interim risk acceptance strategy, and manage control inheritance from enterprise services and range systems Reference Compliance: Ensure that all activities and documentation are compliant with the latest DoD and federal cybersecurity standards, such as: DoDI 8510.01 Risk Management Framework (RMF) NIST SP 800-53 Rev. 5 NIST SP 800-171 (CUI) DoD Zero Trust Reference Architecture DoD Cloud Security Requirements Guide (SRG) / FedRAMP baselines (aligned to IL5 unless otherwise directed) Qualifications 5+ years of experience in cybersecurity, specifically in the development and coordination of cyber accreditation packages BS or BA degree in Cybersecurity, Information Technology, or a related field. An additional 6 years of relevant work experience may be substituted for a bachelor's degree, or 4 additional years of work experience with a relevant associate degree. Active Secret Clearance Demonstrated experience with RMF, SSP development, and POA&M management Familiarity with DoD and federal cybersecurity guidelines, including DoDI 8510.01, NIST SP 800-53 Rev. 5, NIST SP 800-171, DoD Zero Trust Reference Architecture, and DoD Cloud SRG/FedRAMP baselines Strong analytical and problem-solving skills Ability to effectively coordinate and communicate with various stakeholders, including AO, ISSM, and other cybersecurity professionals Current Security+ Certificate IAM Level 2 as per DoD Directive 8570.01; and experience working with the DIACAP/Risk Management Framework processes Excellent communication and interpersonal skills-verbal, non-verbal, written, and listening-for staff, customer and organizational level communications, both formal and informal Ability to work independently, self-starter Working knowledge and use of Microsoft Office suite programs, MS Word, Excel, Access, and PowerPoint Preferred Qualifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification Experience with cloud security and FedRAMP compliance
    $91k-134k yearly est. 16d ago
  • Senior AI Information Security Analyst

    Invoca 4.3company rating

    Information security analyst job in Santa Barbara, CA

    Job Description Senior Information Security Analyst II (AI Focus) About the Opportunity at Invoca At Invoca, we offer a truly unique and valuable engineering experience. You'll join a team of world-class engineers dedicated to scaling our AI and Information Security program within our rapidly growing company and SaaS application. We empower you to discover innovative ways to secure our platform and people. Our remote-first team is committed to upholding high standards through modern methodologies of agile software development, test-driven development, and DevOps. Our Information Security Team: A Culture of Empowerment and Ownership Our Information Security team is dedicated to building trust and resilience into everything we do at Invoca. We embed security and compliance into our products and operations, enabling the company to move quickly and confidently without sacrificing safety. By combining security engineering expertise with compliance excellence, we protect our platform, meet and exceed industry standards, and empower innovation. If you're passionate about solving complex challenges, driving a security-first mindset, and helping build a culture of trust, you'll find a home here. You'll join a team where everyone is striving to constantly improve their knowledge of tools, practices, and processes. We are an incredibly supportive team, swarming when problems arise and providing great feedback to help each other grow. Working on our close-knit, cross-functional teams offers a fantastic opportunity to expand your knowledge across various domains, from databases to front ends to telephony and everything in between. We are passionate about continuous improvement, working at a brisk but sustainable pace, writing resilient code, maintaining production reliability, paying down technical debt, and hiring fantastic teammates; and we love to share these passions with each other. Learn more about the Invoca development team on our blog and check out our open source projects. How You'll Contribute and Grow Shape AI & Security Compliance: You'll play a key role in executing a comprehensive global AI and security compliance strategy, aligning with our business objectives and values. You'll contribute to ensuring compliance with international regulations and frameworks such as ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, CCPA, and HIPAA. You'll collaborate with diverse teams (Product, Engineering, AI/ML, HR, Legal, Sales) to foster responsible and ethical AI practices through policies, controls, and communications. Strengthen Audit & Risk Management: You'll participate in regular internal and external AI and information security audits, ensuring our compliance programs are effective. You'll help identify control gaps, provide context to risk owners, and contribute to improvements that mitigate compliance and AI-related risks. You'll also work across teams to build a comprehensive risk register and offer guidance on Third-Party Risk Management (TPRM) and vendor risk management. Advance Policy & Program Development: You'll assist in creating and updating policies to address internal and external threats, including emerging AI risks like adversarial AI, data poisoning, and model drift. You'll help embed responsible AI and security practices into our development lifecycle through policies, playbooks, continuous monitoring, and governance guardrails. Build Customer Trust & Enable Sales: You'll support our Customer Success and Sales teams by responding to customer AI and security questionnaires, identifying opportunities for automation and process improvement. You'll build customer confidence in Invoca's AI systems and compliance programs through direct interactions and develop scalable solutions for sales enablement, including standardized compliance documentation and AI risk transparency materials. Drive Education & Awareness: You'll keep stakeholders informed about new AI regulations and compliance changes, proactively preparing the organization for third-party audits and certifications. You'll train employees on AI risk management, ethical AI principles, and compliance responsibilities, promoting awareness of AI trust, accountability, and transparency across the organization. Team Enablement & Leadership: You'll provide roadmap guidance for the long-term direction of AI and compliance practices within the team. You'll mentor junior team members, helping them build skills in AI compliance, auditing, and governance frameworks, and participate in on-call rotations to support security operations, incident response, and production reliability. What We're Looking For in You Strong knowledge and experience with compliance frameworks, including ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, HIPAA, and CCPA. Understanding of AI risk management, governance, and ethical AI principles (bias, fairness, transparency, accountability). Excellent verbal and written communication skills with the ability to explain complex AI compliance requirements to diverse teams. Experience with compliance audits, evidence collection, and policy creation for both security and AI systems. Team leadership or project management experience, with a proven ability to mentor and influence cross-functional stakeholders. Familiarity with operational security practices: log analysis, incident response, on-call participation, and escalation management. Understanding of modern technical environments, including cloud computing, Infrastructure as Code, CI/CD pipelines, and SDLC processes. Deep understanding of AI policy domains such as explainability, transparency, fairness/non-discrimination, accountability, and the ability to design practical monitoring (e.g., fairness trackers) that align with evolving standards. Depth of knowledge beyond surface-level compliance, with the ability to adapt in the face of a rapidly changing and evolving AI regulatory landscape. This role is remote and open to candidates located in the United States and Canada only. Please note that we are unable to provide visa sponsorship for this position. Salary, Benefits & Perks: At Invoca, all new hires in the U.S. receive benefits starting on day one of employment. Our benefits offerings include: Please note that benefits for teammates outside the U.S. may vary in accordance with their country's laws and regulations. Flexible Time Off - We encourage a healthy work-life balance. Our flexible paid time off policy allows you to recharge and take time away as needed. Paid Holidays - Invoca provides 16 U.S. paid holidays, including a winter break, giving you ample opportunity to refresh and spend time with friends and family. Health Benefits - Our healthcare program includes medical, dental, and vision coverage, with multiple plan options so you can choose what works best for you and your family. Fertility assistance is also included. Retirement - Invoca offers a 401(k) plan through Fidelity with a company match of up to 4%. Stock Options - All employees are invited to share in Invoca's success through stock options. Mental Health Program- Well-being support on a broad range of issues is available through our SpringHealth program. Paid Family Leave - Up to 6 weeks of 100% paid leave is provided for baby bonding, adoption, and caring for family members. Paid Medical Leave - Up to 12 weeks of 100% paid leave is provided for childbirth and medical needs. InVacation - As a thank-you to our long-term team members, we offer a bonus after 7 years of service. Wellness Subsidy - We provide a subsidy that can be applied toward gym memberships, fitness classes, and more. Position Base Range - Salary Range $107,000 - $161,000/yr plus bonus potential DEI Statement Our company is committed to creating a culture that is not only grounded in continuous learning, teamwork, and customer success, but is fair, equitable, and welcoming for everyone." Gregg Johnson CEO And to us, diversity and inclusion means even more than treating current employees well and making them feel welcome. It also means proactively hiring people who bring different insights because of their unique demographics, ways of thinking, and prior experiences. We intend to continue hiring great people and protecting our culture so everyone can be themselves and speak their minds. That way Invoca will always be a place filled with laughter, energy, hard work, thoughtfulness and respect. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. #LI-Remote
    $107k-161k yearly 22d ago
  • Sr Anlyst, Security - Goleta, CA

    RTX Corporation

    Information security analyst job in Goleta, CA

    **Country:** United States of America ** Onsite **U.S. Citizen, U.S. Person, or Immigration Status Requirements:** Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance **Security Clearance:** DoD Clearance: Secret At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our Senior Security Analyst provides industrial security support within the following areas: clearance processing, visit certifications, document control, and physical security, including alarm response for Open Storage Areas. You will make critical security decisions concerning high value contracts and implement security procedures that will prevent unauthorized access to company and government facilities or information. **What You Will Do** + Administrative duties of administering security clearance briefings to employees who are granted a security clearance + Debriefing Personal upon notification of Retirement/Termination + Continuously evaluates compliance of personnel security activities with security requirements + Conduct security self-inspections, program security reviews, apply risk mitigation methodologies, support customer assessments, and implement security measures to meet requirements + Administer day-to-day security programs, personnel processing, program reviews, document control system, audits & self-inspections, violation investigations & reports, receipt/dispatch/destruction/mail logs, visit certs, etc. + Analyze security issues/problems and provide focused solutions + Solve routine problems of limited scope and complexity + Willing to work extended hours, in a fast paced, driven environment + Must possess a valid driver's license **Qualifications You Must Have** + Typically requires a Bachelor's degree and 2 years relevant experience OR in absence of a degree, 6 years relevant experience. + Active and transferable U.S. government issued SECRET security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. + Experience with any of the following: NISPOM, ICD 705, or experience working in a classified environment. **Qualifications We Prefer** + Ability to solve routine problems of limited scope and complexity + Self-starter with minimal supervision + Willing to work extended hours, in a fast paced, driven environment + Able to perform well in fast-paced, multi-task environment + Great attention to detail + Strong organizational and interpersonal skills + Customer service oriented + Team player **What We Offer** + Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. + Relocation Non-Eligible - Relocation assistance not available . **Learn More & Apply Now!** + Please consider the following role type definition as you apply for this role. ‒ Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. **_As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote._** The salary range for this role is 72,000 USD - 144,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. _RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act._ **Privacy Policy and Terms:** Click on this link (******************************************************** to read the Policy and Terms Raytheon Technologies is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
    $111k-151k yearly est. 60d+ ago
  • Sr Anlyst, Security - Goleta, CA

    RTX

    Information security analyst job in Goleta, CA

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: DoD Clearance: Secret At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our Senior Security Analyst provides industrial security support within the following areas: clearance processing, visit certifications, document control, and physical security, including alarm response for Open Storage Areas. You will make critical security decisions concerning high value contracts and implement security procedures that will prevent unauthorized access to company and government facilities or information. What You Will Do Administrative duties of administering security clearance briefings to employees who are granted a security clearance Debriefing Personal upon notification of Retirement/Termination Continuously evaluates compliance of personnel security activities with security requirements Conduct security self-inspections, program security reviews, apply risk mitigation methodologies, support customer assessments, and implement security measures to meet requirements Administer day-to-day security programs, personnel processing, program reviews, document control system, audits & self-inspections, violation investigations & reports, receipt/dispatch/destruction/mail logs, visit certs, etc. Analyze security issues/problems and provide focused solutions Solve routine problems of limited scope and complexity Willing to work extended hours, in a fast paced, driven environment Must possess a valid driver's license Qualifications You Must Have Typically requires a Bachelor's degree and 2 years relevant experience OR in absence of a degree, 6 years relevant experience. Active and transferable U.S. government issued SECRET security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance. Experience with any of the following: NISPOM, ICD 705, or experience working in a classified environment. Qualifications We Prefer Ability to solve routine problems of limited scope and complexity Self-starter with minimal supervision Willing to work extended hours, in a fast paced, driven environment Able to perform well in fast-paced, multi-task environment Great attention to detail Strong organizational and interpersonal skills Customer service oriented Team player What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. Relocation Non-Eligible - Relocation assistance not available . Learn More & Apply Now! Please consider the following role type definition as you apply for this role. ‒ Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 72,000 USD - 144,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $111k-151k yearly est. Auto-Apply 60d+ ago
  • Information Systems Security Officer (ISSO) II - Lompoc, CA

    General Dynamics 4.7company rating

    Information security analyst job in Lompoc, CA

    Full Part/Time: Full time Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Information Security, Information Security Management, Information System Security Certifications: None Experience: 2 + years of related experience US Citizenship Required: Yes Job Description: The ISSO is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISSO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system. This also will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries. This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance shall include: * Assist the ISSM in meeting their duties and responsibilities * Prepare, review, and update authorization packages * Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media * Notify ISSM when changes occur that might affect the authorization determination of the information system(s) * Conduct periodic reviews of information systems to ensure compliance with the security authorization package * Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change * Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly * Ensure all IS security-related documentation is current and accessible to properly authorized individuals * Ensure audit records are collected, reviewed, and documented (to include any anomalies) * Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties * Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans * Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them * Prepare reports on the status of security safeguards applied to computer systems * Perform ISSO duties in support of in-house and external customers * Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries Experience: * 2-5 years related experience * SAP experience required * Prior performance in roles such as System, Network Administrator, or ISSO Education: * Bachelor's degree OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: * IAT Level II or IAM Level II - within 6 months of hire (Security+ CE, CCNA Security, etc.) Security Clearance: * TS/SCI required * Must be able to Attain - TS/SCI with CI Polygraph Other Requirements: * Must be able to regularly lift up to 50lbs #AirforceSAPOpportunities The likely salary range for this position is $93,662 - $121,080. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA CA Lompoc Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
    $93.7k-121.1k yearly 9d ago
  • Information System Security Officer

    DRS Technologies 4.6company rating

    Information security analyst job in Goleta, CA

    The Leonardo DRS Land Systems business is a recognized leader in the design and integration of complex technologies into new and legacy systems and platforms for global military and commercial customers. We are a 5 year running Top Workplace in the Greater St. Louis area. Job Summary Leonardo DRS Land Systems is seeking a full time Information System Security Officer (ISSO) four our Goleta, CA facility. As an ISSO, you will be challenged to stay current with the latest technological developments in information security. You will be exposed to advanced technologies and will play a major role in identifying potential vulnerabilities and intrusions on Information Technology (IT) systems by our adversaries. In this role, you will collaboratively assist the Facility Security Officer (FSO) with daily industrial security operations, support security education and training, and ensure compliance with DRS policies and procedures related to the 32 CFR part 117. Together we'll address evolving threats to national security, thus keeping our nation and our warfighter safe. Successful candidates for this role will coordinate with the Corporate Risk Management Framework Support Center, other ISSOs, and Information System Security Managers (ISSM) across the company to obtain and maintain certifications and accreditations under the Defense Counterintelligence Security Agency (DCSA) and Intelligence Community (IC) Risk Management Framework. If you are interested in information system security, industrial security, management, and the opportunity to obtain industry professional certifications on the job, please apply now! Job Responsibilities * Develop, implement, and administer security procedures for classified computer systems based on the Defense Counterintelligence Security Agency (DCSA) and other U.S. Government agency security requirements * Apply current Computer Science best practices and technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems * Serve as Assistant Facility Security Officer (AFSO) by supporting the Facility Security Officer (FSO) in ALL aspects of Industrial Security * Serve as primary advisor to the Business Unit Information System Security Manager (ISSM) on all local classified Information Systems Security matters, and as liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems * Implement local policies, processes, procedures, and compliance with all National Industrial Security Program (NISP), Defense Information System Agency (DISA), and Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual (DAAPM) requirements * Develop and maintain all DoD requirements, including the DAAPM & Risk Management Framework (RMF) standards to ensure compliance with the National Industrial Security Program Operating Manual (NISPOM) * Review and approve requests for access to cleared computer systems in the development and implementation of policies and System Security Plans supporting Corporate Security & Government agency requirements * Conduct periodic self-inspections on local processes and practices to ensure compliance; accurately reports security posture to management & ensure corrective actions are taken * Identify and document unique local threats and vulnerabilities to classified information systems security * Conduct and coordinate investigations into security violations related to cleared information systems; ensures corrective actions are implemented * Perform independently, or with a group, on department or enterprise-level security projects designed to enhance the security posture of DRS * DISA STIG/SCAP implementation and management of security configurations utilizing Corporate ISSM toolkit * Support, communicate, reinforce, and defend the mission, values, and culture of the organization * Assist with execution of typical security related issues may include physical access to buildings, room, couriers, escort, clearances, packages, documentation, and debriefings * Obtain access to and keep information current on required government websites to include: DISS, NBIS, SWFT, eMASS * May serve as alternate COMSEC custodian * Other duties as assigned Qualifications * Associate's degree in Information System Security, Computer Science, Cybersecurity, Information Technology, and/or a Computer Technical Certificate (I.E. MSCE Server 2016, CCNA, GIAC certificate) or equivalent related experience * 1 - 3 years of relevant experience * Must be a United States Citizen and have a current active Security Clearance. This will be confirmed prior to offer * Strong knowledge of information systems security components and best practices including firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques * Analytical ability to understand and interpret Department of Defense (DoD) and Company Security policies and procedures * Knowledge of U.S. Government Information System security standards (i.e. NIST and ISO27) * Highly self motivated and strong organizational skills and excellent attention to detail * Strong interpersonal oral, written and communication skills * Exceptional attention to detail * Be a self-starter, able to work under pressure with limited supervision, and work well with others in a large and diverse environment * Ability to successfully prioritize and manage to completion multiple complex tasks and deliverables, and demonstrate the highest degree of integrity and accountability in all actions * Must complete CDSE Facility Security Officer Curriculum for Possessing Facilities course within six months from date of hire * Willing and able to travel up to 25% of the time Preferred Skills and Experience: * A strong knowledge and understanding of NIST Special Publication 800-53, ISO27001, DoD 8510.01, NISPOM, & ICDs * Experience troubleshooting Windows 10/11 Operating Systems * Experience with the SCAP Compliance Checker and the DISA STIG Viewer * Working knowledge of 32 CFR Part 117 National Industrial Security Program Operations Manual (NISPOM) U.S. Citizenship required. This position requires an active DOD. The expected pay scale for this position is $69,051.00/year - $89,767.00/year for the state of California. Should the level, location, or scope of the position change during the hiring process, the pay scale may be modified accordingly. When extending an offer of employment, Leonardo DRS considers factors such as (but not limited to) the scope and responsibilities of the position; any Federal Government contract labor categories and contract wage rates, the candidate's relevant work experience, education/training, certifications, and key skills; internal equity; and market and business considerations. Taking care of our people is a top priority at Leonardo DRS. We are proud to offer competitive salaries and comprehensive benefits, including medical, dental, and vision coverage, a company contribution to a health savings account, telemedicine, life and disability insurance, legal insurance, and a 401(k) savings plan. We champion wellness programs that focus on physical, emotional, and financial well-being. We develop our talent by offering programs and activities to support career-growth, professional development, and skill enhancement. And we understand there is more to life than work, and the importance of offering flexible work schedules with our 9/80 program, competitive vacation, health/emergency leave, paid parental leave, and community service hours. * Some employees are eligible for limited benefits only Leonardo DRS, Inc. and its subsidiaries provide equal opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. #LSY Our Vision. To be the leading mid-tier defense technology company in the U.S. Our Values. The Leonardo DRS culture is defined by our Core Values and Principles: * Integrity * Agility * Excellence * Customer Focus * Community & Respect * Innovation We strive to uphold them in all aspects of our business practices to inspire our employees and provide outstanding support for our customers. Nearest Major Market: Santa Barbara Nearest Secondary Market: Santa Maria
    $69.1k-89.8k yearly 12d ago
  • Information Systems Security Officer (ISSO) II - Lompoc, CA

    GDIT

    Information security analyst job in Lompoc, CA

    Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Information Security, Information Security Management, Information System Security Certifications: None Experience: 2 + years of related experience US Citizenship Required: Yes Job Description: The ISSO is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISSO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system. This also will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries. This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance shall include: Assist the ISSM in meeting their duties and responsibilities Prepare, review, and update authorization packages Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media Notify ISSM when changes occur that might affect the authorization determination of the information system(s) Conduct periodic reviews of information systems to ensure compliance with the security authorization package Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly Ensure all IS security-related documentation is current and accessible to properly authorized individuals Ensure audit records are collected, reviewed, and documented (to include any anomalies) Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them Prepare reports on the status of security safeguards applied to computer systems Perform ISSO duties in support of in-house and external customers Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries Experience: 2-5 years related experience SAP experience required Prior performance in roles such as System, Network Administrator, or ISSO Education: Bachelor's degree OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: IAT Level II or IAM Level II - within 6 months of hire (Security+ CE, CCNA Security, etc.) Security Clearance: TS/SCI required Must be able to Attain - TS/SCI with CI Polygraph Other Requirements: Must be able to regularly lift up to 50lbs #AirforceSAPOpportunities The likely salary range for this position is $93,662 - $121,080. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA CA Lompoc Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
    $93.7k-121.1k yearly Auto-Apply 6d ago
  • Information Systems Security Officer (ISSO) II - Lompoc, CA

    GD Information Technology

    Information security analyst job in Lompoc, CA

    Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Job Qualifications: Skills: Information Security, Information Security Management, Information System Security Certifications: None Experience: 2 + years of related experience US Citizenship Required: Yes Job Description: The ISSO is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISSO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system. This also will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries. This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide “day-to-day” support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance shall include: Assist the ISSM in meeting their duties and responsibilities Prepare, review, and update authorization packages Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media Notify ISSM when changes occur that might affect the authorization determination of the information system(s) Conduct periodic reviews of information systems to ensure compliance with the security authorization package Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly Ensure all IS security-related documentation is current and accessible to properly authorized individuals Ensure audit records are collected, reviewed, and documented (to include any anomalies) Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them Prepare reports on the status of security safeguards applied to computer systems Perform ISSO duties in support of in-house and external customers Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries Experience: 2-5 years related experience SAP experience required Prior performance in roles such as System, Network Administrator, or ISSO Education: Bachelor's degree OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: IAT Level II or IAM Level II - within 6 months of hire (Security+ CE, CCNA Security, etc.) Security Clearance: TS/SCI required Must be able to Attain - TS/SCI with CI Polygraph Other Requirements: Must be able to regularly lift up to 50lbs #AirforceSAPOpportunities The likely salary range for this position is $93,662 - $121,080. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: 10-25% Telecommuting Options: Onsite Work Location: USA CA Lompoc Additional Work Locations: Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc. Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
    $93.7k-121.1k yearly Auto-Apply 20d ago
  • Information System Security Officer

    Leonardo DRS, Inc.

    Information security analyst job in Goleta, CA

    **Job ID:** **113110** The Leonardo DRS Land Systems business is a recognized leader in the design and integration of complex technologies into new and legacy systems and platforms for global military and commercial customers. We are a 5 year running Top Workplace in the Greater St. Louis area. **Job Summary** Leonardo DRS Land Systems is seeking a full time Information System Security Officer (ISSO) four our Goleta, CA facility. As an ISSO, you will be challenged to stay current with the latest technological developments in information security. You will be exposed to advanced technologies and will play a major role in identifying potential vulnerabilities and intrusions on Information Technology (IT) systems by our adversaries. In this role, you will collaboratively assist the Facility Security Officer (FSO) with daily industrial security operations, support security education and training, and ensure compliance with DRS policies and procedures related to the 32 CFR part 117. Together we'll address evolving threats to national security, thus keeping our nation and our warfighter safe. Successful candidates for this role will coordinate with the Corporate Risk Management Framework Support Center, other ISSOs, and Information System Security Managers (ISSM) across the company to obtain and maintain certifications and accreditations under the Defense Counterintelligence Security Agency (DCSA) and Intelligence Community (IC) Risk Management Framework. If you are interested in information system security, industrial security, management, and the opportunity to obtain industry professional certifications on the job, please apply now! **Job Responsibilities** + Develop, implement, and administer security procedures for classified computer systems based on the Defense Counterintelligence Security Agency (DCSA) and other U.S. Government agency security requirements + Apply current Computer Science best practices and technologies to the development, evaluation, and integration of computer systems and networks to maintain system security for classified information systems + Serve as Assistant Facility Security Officer (AFSO) by supporting the Facility Security Officer (FSO) in ALL aspects of Industrial Security + Serve as primary advisor to the Business Unit Information System Security Manager (ISSM) on all local classified Information Systems Security matters, and as liaison to the local Defense Counterintelligence and Security Agency (DCSA) Information Systems Security Professional (ISSP) on all matters pertaining to classified information systems + Implement local policies, processes, procedures, and compliance with all National Industrial Security Program (NISP), Defense Information System Agency (DISA), and Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual (DAAPM) requirements + Develop and maintain all DoD requirements, including the DAAPM & Risk Management Framework (RMF) standards to ensure compliance with the National Industrial Security Program Operating Manual (NISPOM) + Review and approve requests for access to cleared computer systems in the development and implementation of policies and System Security Plans supporting Corporate Security & Government agency requirements + Conduct periodic self-inspections on local processes and practices to ensure compliance; accurately reports security posture to management & ensure corrective actions are taken + Identify and document unique local threats and vulnerabilities to classified information systems security + Conduct and coordinate investigations into security violations related to cleared information systems; ensures corrective actions are implemented + Perform independently, or with a group, on department or enterprise-level security projects designed to enhance the security posture of DRS + DISA STIG/SCAP implementation and management of security configurations utilizing Corporate ISSM toolkit + Support, communicate, reinforce, and defend the mission, values, and culture of the organization + Assist with execution of typical security related issues may include physical access to buildings, room, couriers, escort, clearances, packages, documentation, and debriefings + Obtain access to and keep information current on required government websites to include: DISS, NBIS, SWFT, eMASS + May serve as alternate COMSEC custodian + Other duties as assigned **Qualifications** + Associate's degree in Information System Security, Computer Science, Cybersecurity, Information Technology, and/or a Computer Technical Certificate (I.E. MSCE Server 2016, CCNA, GIAC certificate) or equivalent related experience + 1 - 3 years of relevant experience + Must be a United States Citizen and have a current active Security Clearance. This will be confirmed prior to offer + Strong knowledge of information systems security components and best practices including firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques + Analytical ability to understand and interpret Department of Defense (DoD) and Company Security policies and procedures + Knowledge of U.S. Government Information System security standards (i.e. NIST and ISO27) + Highly self motivated and strong organizational skills and excellent attention to detail + Strong interpersonal oral, written and communication skills + Exceptional attention to detail + Be a self-starter, able to work under pressure with limited supervision, and work well with others in a large and diverse environment + Ability to successfully prioritize and manage to completion multiple complex tasks and deliverables, and demonstrate the highest degree of integrity and accountability in all actions + Must complete CDSE Facility Security Officer Curriculum for Possessing Facilities course within six months from date of hire + Willing and able to travel up to 25% of the time Preferred Skills and Experience: + A strong knowledge and understanding of NIST Special Publication 800-53, ISO27001, DoD 8510.01, NISPOM, & ICDs + Experience troubleshooting Windows 10/11 Operating Systems + Experience with the SCAP Compliance Checker and the DISA STIG Viewer + Working knowledge of 32 CFR Part 117 National Industrial Security Program Operations Manual (NISPOM) U.S. Citizenship required. This position requires an active DOD. _The expected pay scale for this position is_ _$69,051.00/year - $89,767.00/year for the state of California._ _Should the level, location, or scope of the position change during the hiring process, the pay scale may be modified accordingly. When extending an offer of employment, Leonardo DRS considers factors such as (but not limited to) the scope and responsibilities of the position; any Federal Government contract labor categories and contract wage rates, the candidate's relevant work experience, education/training, certifications, and key skills; internal equity; and market and business considerations._ _Taking care of our people is a top priority at Leonardo DRS. We are proud to offer competitive salaries and comprehensive benefits, including medical, dental, and vision coverage, a company contribution to a health savings account, telemedicine, life and disability insurance, legal insurance, and a 401(k) savings plan. We champion wellness programs that focus on physical, emotional, and financial well-being. We develop our talent by offering programs and activities to support career-growth, professional development, and skill enhancement. And we understand there is more to life than work, and the importance of offering flexible work schedules with our 9/80 program, competitive vacation, health/emergency leave, paid parental leave, and community service hours._ _*Some employees are eligible for limited benefits only_ _Leonardo DRS, Inc. and its subsidiaries provide equal opportunities to all employees and applicants for employment and prohibit discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, protected veteran status, or any other characteristic protected by federal, state, or local laws. #LSY_
    $69.1k-89.8k yearly 60d+ ago
  • IT Operation Analyst

    Big Brand Tire & Service 3.6company rating

    Information security analyst job in Moorpark, CA

    Job Description The IT Operations Analyst supports the day-to-day operations of the IT department by managing billing, assets, and administrative workflows while providing front-line technical support. This role ensures operational efficiency across IT financial processes, asset lifecycle management, and end-user support. The ideal candidate is detail-oriented, organized, and tech-savvy - capable of balancing administrative accuracy with hands-on IT support in a fast-paced environment. Key Responsibilities Financial & Billing Management Manage and reconcile all IT-related billing, including internet, phone, software subscriptions, and cloud services. Track and process invoices for approval and payment, ensuring coding accuracy to the correct cost centers or departments. Review and validate monthly vendor statements to ensure service accuracy and resolve billing discrepancies. Maintain a monthly billing tracker to forecast and report IT expenses. Assist in budgeting and expense analysis for recurring IT costs. Asset & Inventory Management Maintain an up-to-date inventory of all IT assets (laptops, phones, networking equipment, peripherals, etc.). Track hardware assignments, returns, and warranty status. Support procurement by sourcing quotes and coordinating with vendors. Manage asset lifecycle from acquisition to decommissioning, ensuring accurate documentation. Maintain asset tags and records in the IT asset management (ITAM) or inventory system. Administrative & Credit Card Management Code and reconcile IT credit card purchases accurately within accounting timelines. Work closely with Finance and Procurement to ensure compliance with company purchasing policies. Prepare monthly spend summaries and assist with expense reporting. IT Support (Level 1) Provide first-line support for common IT issues including password resets, hardware troubleshooting, and basic network or connectivity issues. Log and track tickets in the helpdesk system, escalating as needed to Level 2/3 engineers. Support onboarding/offboarding activities including account setup, equipment prep, and retrieval. Maintain documentation for IT processes and user guides. Qualifications Experience: 2+ years in IT administration, coordination, or analyst role preferred. Experience with billing systems, IT asset tracking, or expense reporting tools. Exposure to Microsoft 365, Google Workspace, or similar environments. Skills: Strong Excel/Sheets and data management skills. Attention to detail with high accuracy in record-keeping. Excellent communication and problem-solving abilities. Ability to multitask and manage priorities across finance and IT operations. Benefits Paid vacation and holidays Medical, dental, vision, life, and supplemental insurances 401(k) with company match Employee discounts Big Brand Tire & Service is an Equal Opportunity Employer. We celebrate diversity and are committed to a respectful, inclusive workplace. Powered by JazzHR CrNMewZn1A
    $92k-129k yearly est. 4d ago
  • Lead Vulnerability Management Security Engineer

    Deckers 4.8company rating

    Information security analyst job in Goleta, CA

    At Deckers Brands, Together, Every Step is a promise kept that every employee can bring their authentic self, is valued and supported, as a whole person, at work and beyond. Together, Every Step is how we continue to deliver exceptional business results, experience an amazing place to work, and have a positive impact on the communities and world around us. Job Title: Lead Vulnerability Management Security Engineer Reports to: Dir, Security Engineering Location: United States (Remote) Interested applicants must reside in one of the following approved states: Arizona, California, Colorado, Indiana, Massachusetts, Minnesota, New York, Oregon, Pennsylvania, Texas, Utah, Washington The Role As the Lead Vulnerability Management Security Engineer, you'll be at the heart of Deckers Brands' commitment to safeguarding our people, products, and platforms. You'll set the strategic direction for vulnerability management, collaborating with cross-functional teams to identify, assess, and remediate security risks. Your expertise will help shape our security standards, drive the adoption of advanced technologies, and ensure our environment is resilient against emerging threats. This is a unique opportunity to make a meaningful impact-protecting our business, empowering our teams, and building trust with our customers worldwide. We celebrate diversity--of your background, your experiences and your unique identity. We are committed to ensuring an inclusive and equitable workplace where all of our employees can Come as They Are. We believe that when we bring our different perspectives to work, we are truly Better Together. Your Impact Lead the review and analysis of vulnerability data to identify trends, patterns, and key risks across Deckers' global environment Facilitate vulnerability management meetings and drive risk-based discussions to prioritize and accelerate remediation efforts Advise and support remediation teams in developing actionable plans to address vulnerabilities and strengthen our security posture Perform risk-based assessments for both on-premise and cloud-based services, ensuring robust protection for critical assets Integrate advanced security technologies and automation tools to enhance threat detection and response capabilities Build and present business cases for adopting new security solutions to mitigate emerging risks Develop, consolidate, and maintain security metrics to measure the effectiveness of our cybersecurity program Apply industry-leading frameworks (NIST, ISO27001/2, CIS Top 20 Controls) to establish and maintain best-in-class security measures Foster strong relationships with technical teams, serving as a trusted advisor and championing a culture of security awareness Contribute to the strategic direction of the Technical Security team by designing and implementing tools that enhance customer trust and detect suspicious activity Who You Are BA/BS degree or equivalent experience in a relevant field Security professional certification (CISSP, CVA, GEVA, or similar) preferred 4+ years of hands-on experience in vulnerability management, including scanning, assessment, and remediation Proven success in starting and growing a vulnerability management program Proficiency with leading vulnerability management tools (Tenable, CrowdStrike) and scripting/automation languages (PowerShell, Python) Deep understanding of security frameworks and compliance standards (NIST, ISO27001/2, CIS Top 20 Controls, PCI-DSS, HIPAA) Strong analytical skills to identify patterns, trends, and actionable insights from complex vulnerability data Excellent communication skills for reporting and stakeholder engagement Collaborative mindset with the ability to serve as a trusted advisor across cross-functional teams Self-driven, strategic thinker with a passion for advancing cybersecurity programs What We'll Give You - Competitive Pay and Bonuses - We've created a variety of competitive compensation programs to foster career development, reward success and to show our employees just how much they're valued. Financial Planning and wellbeing - No matter what financial goals our employees have set, we want to help them get there. Our plans provide powerful ways to protect income, pay for expenses and invest in the future. Time away from work - Sometimes we need time away to be with family, focus on our health or just simply recharge. Our plans support our employees' needs to get out, get healthy and come back stronger than ever. Extras, discounts and perks - Being a valued member of the Deckers Brands team means more than just a paycheck. From generous discounts to community-based programs, we offer a variety of cool extras Growth and Development - Deckers Brands was built on the idea of pursuing passion. That's why we offer extensive opportunities and support for personal and professional development. Health and Wellness - There's nothing basic about our comprehensive health and wellness programs and offerings. While at work and at play, we aim to support a healthy lifestyle. $120,000 - $130,000 The salary range posted reflects the minimum and maximum target for new hire salaries for this role in our Goleta, CA location. Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary for your preferred location during the hiring process. Equal Employment Opportunity Diversity and inclusion are key to our success. We are proud to be an equal opportunity employer, and our employees are people with different strengths, experiences and backgrounds who share a passion for our brands. We welcome qualified applicants regardless of their race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, mental or physical disability, medical condition and all the other beautiful parts of your identity. #LI-AR1
    $120k-130k yearly Auto-Apply 29d ago
  • Information Security Risk Specialist

    American Riviera Bank

    Information security analyst job in Santa Barbara, CA

    About the Role: The Information Security Risk Specialist plays a critical role in safeguarding an organization's information assets by identifying, assessing, and mitigating security risks. This position involves developing and implementing risk management strategies that align with business objectives and regulatory requirements. The specialist will collaborate with cross-functional teams to ensure security controls are effective and that risk exposure is minimized.The ideal candidate must have an understanding of current and emerging technological trends and be able to implement appropriate security controls. Also requires an awareness of IT standards, regulations, and laws affecting financial institutions. They are responsible for examining applications from new customers, requesting supportive and missing data and information, and working with other departments to classify data. Understanding the way the Bank operates and the various internal and external factors that may affect its performance and information security is vital to this role. Strong communication skills are also necessary to communicate technological concepts and techniques in daily work. Analytical thinking skills are also crucial, as they must apply a high level of technical knowledge and skill while working in a fast-paced environment. This role also requires strong problem-solving skills and the ability to work independently to successfully perform the assigned tasks. Must learn effective methods to manage risk and have the ability to analyze complex data, interpret laws, and represent management views. Good understanding of all risk-related issues and procedures relating to bank products and services. Minimum Qualifications: Bachelor's degree in Information Security, Computer Science, or a related field. At least 3 years of experience in information security risk management or a similar role. Strong understanding of risk assessment methodologies and information security frameworks such as NIST, ISO 27001, or CIS Controls. Familiarity with regulatory requirements such as GDPR, HIPAA, or SOX. Excellent analytical, communication, and problem-solving skills. Preferred Qualifications: Professional certifications such as CISSP, CISM, CRISC, or equivalent. Experience with security governance, risk, and compliance (GRC) tools. Knowledge of cloud security risk management and emerging technologies. Experience working in a large enterprise or highly regulated industry. Advanced degree in cybersecurity, risk management, or business administration. Responsibilities: Conduct comprehensive risk assessments to identify potential threats to information systems and data. Develop, implement, and maintain risk management frameworks and policies in accordance with industry standards and regulations. Collaborate with IT, compliance, and business teams to design and enforce security controls that mitigate identified risks. Monitor and report on risk metrics, security incidents, and compliance status to senior management and stakeholders. Stay current with evolving cybersecurity threats, vulnerabilities, and regulatory changes to update risk strategies accordingly. Skills: The Information Security Risk Specialist uses analytical skills daily to evaluate complex security risks and develop effective mitigation strategies. Communication skills are essential for collaborating with diverse teams and conveying risk findings to both technical and non-technical stakeholders. Proficiency with risk management frameworks and tools enables the specialist to implement structured and repeatable processes for assessing and managing risks. Knowledge of regulatory environments ensures that risk strategies comply with legal and industry standards. Additionally, staying informed about emerging threats and technologies allows the specialist to adapt risk management approaches proactively, maintaining a strong security posture.
    $93k-137k yearly est. Auto-Apply 10d ago
  • Senior Information Systems Security Officer (ISSO) - Goleta, CA

    Raytheon 4.6company rating

    Information security analyst job in Goleta, CA

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: Secret - Current At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our cybersecurity team is seeking a Senior Information Systems Security Officer (ISSO) to support our team 100% onsite at our facility in Goleta, California. The successful candidate will interface with the Information Systems Security Manager (ISSM) to ensure adherence with NIST Special Publications, customer directives, and company policies as applicable all NISPOM Chapter 8, DAAPM, JSIG policies. What You Will Do Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness. Investigating information system security violations and help prepare reports specifying corrective and preventative actions. Reviewing and approving (within authority) configuration management requests. Conducting technical and administrative assessments. Integrating new cybersecurity processes, procedures, and tools. Support the creation, review and update of cybersecurity documentation and other technical writing. Qualifications You Must Have Typically requires a University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years' experience. Current IAM Level I certification (Security+ or other). Relevant Experience Considered in any combination: Cybersecurity, systems security or hardening Information Technology Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics) Physical security/security, policework/criminal justice, investigations, or Border Patrol Project or program management, office management, senior administration, or account management Qualifications We Prefer Experience working in DoD classified operating and/or laboratory environments. Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc. Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry. Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF). Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT). Familiarity with large multi-facility networks including various complex components, including Windows and Linux environments. Experience interpreting, implementing, and assessing DISA STIGs. Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication. What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. Relocation Eligible - Relocation assistance available Please consider the following role type definition as you apply for this role: Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. We are RTX #LI-Onsite As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 95,500 USD - 181,700 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $73k-98k yearly est. Auto-Apply 15d ago
  • Senior AI Information Security Analyst

    Invoca 4.3company rating

    Information security analyst job in Santa Barbara, CA

    Senior Information Security Analyst II (AI Focus) About the Opportunity at Invoca At Invoca, we offer a truly unique and valuable engineering experience. You'll join a team of world-class engineers dedicated to scaling our AI and Information Security program within our rapidly growing company and SaaS application. We empower you to discover innovative ways to secure our platform and people. Our remote-first team is committed to upholding high standards through modern methodologies of agile software development, test-driven development, and DevOps. Our Information Security Team: A Culture of Empowerment and Ownership Our Information Security team is dedicated to building trust and resilience into everything we do at Invoca. We embed security and compliance into our products and operations, enabling the company to move quickly and confidently without sacrificing safety. By combining security engineering expertise with compliance excellence, we protect our platform, meet and exceed industry standards, and empower innovation. If you're passionate about solving complex challenges, driving a security-first mindset, and helping build a culture of trust, you'll find a home here. You'll join a team where everyone is striving to constantly improve their knowledge of tools, practices, and processes. We are an incredibly supportive team, swarming when problems arise and providing great feedback to help each other grow. Working on our close-knit, cross-functional teams offers a fantastic opportunity to expand your knowledge across various domains, from databases to front ends to telephony and everything in between. We are passionate about continuous improvement, working at a brisk but sustainable pace, writing resilient code, maintaining production reliability, paying down technical debt, and hiring fantastic teammates; and we love to share these passions with each other. Learn more about the Invoca development team on our blog and check out our open source projects. How You'll Contribute and Grow Shape AI & Security Compliance: You'll play a key role in executing a comprehensive global AI and security compliance strategy, aligning with our business objectives and values. You'll contribute to ensuring compliance with international regulations and frameworks such as ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, CCPA, and HIPAA. You'll collaborate with diverse teams (Product, Engineering, AI/ML, HR, Legal, Sales) to foster responsible and ethical AI practices through policies, controls, and communications. Strengthen Audit & Risk Management: You'll participate in regular internal and external AI and information security audits, ensuring our compliance programs are effective. You'll help identify control gaps, provide context to risk owners, and contribute to improvements that mitigate compliance and AI-related risks. You'll also work across teams to build a comprehensive risk register and offer guidance on Third-Party Risk Management (TPRM) and vendor risk management. Advance Policy & Program Development: You'll assist in creating and updating policies to address internal and external threats, including emerging AI risks like adversarial AI, data poisoning, and model drift. You'll help embed responsible AI and security practices into our development lifecycle through policies, playbooks, continuous monitoring, and governance guardrails. Build Customer Trust & Enable Sales: You'll support our Customer Success and Sales teams by responding to customer AI and security questionnaires, identifying opportunities for automation and process improvement. You'll build customer confidence in Invoca's AI systems and compliance programs through direct interactions and develop scalable solutions for sales enablement, including standardized compliance documentation and AI risk transparency materials. Drive Education & Awareness: You'll keep stakeholders informed about new AI regulations and compliance changes, proactively preparing the organization for third-party audits and certifications. You'll train employees on AI risk management, ethical AI principles, and compliance responsibilities, promoting awareness of AI trust, accountability, and transparency across the organization. Team Enablement & Leadership: You'll provide roadmap guidance for the long-term direction of AI and compliance practices within the team. You'll mentor junior team members, helping them build skills in AI compliance, auditing, and governance frameworks, and participate in on-call rotations to support security operations, incident response, and production reliability. What We're Looking For in You Strong knowledge and experience with compliance frameworks, including ISO 42001, ISO 27001, PCI DSS 4.0, SOC 2, GDPR, HIPAA, and CCPA. Understanding of AI risk management, governance, and ethical AI principles (bias, fairness, transparency, accountability). Excellent verbal and written communication skills with the ability to explain complex AI compliance requirements to diverse teams. Experience with compliance audits, evidence collection, and policy creation for both security and AI systems. Team leadership or project management experience, with a proven ability to mentor and influence cross-functional stakeholders. Familiarity with operational security practices: log analysis, incident response, on-call participation, and escalation management. Understanding of modern technical environments, including cloud computing, Infrastructure as Code, CI/CD pipelines, and SDLC processes. Deep understanding of AI policy domains such as explainability, transparency, fairness/non-discrimination, accountability, and the ability to design practical monitoring (e.g., fairness trackers) that align with evolving standards. Depth of knowledge beyond surface-level compliance, with the ability to adapt in the face of a rapidly changing and evolving AI regulatory landscape. This role is remote and open to candidates located in the United States and Canada only. Please note that we are unable to provide visa sponsorship for this position. Salary, Benefits & Perks: At Invoca, all new hires in the U.S. receive benefits starting on day one of employment. Our benefits offerings include: Please note that benefits for teammates outside the U.S. may vary in accordance with their country's laws and regulations. Flexible Time Off - We encourage a healthy work-life balance. Our flexible paid time off policy allows you to recharge and take time away as needed. Paid Holidays - Invoca provides 16 U.S. paid holidays, including a winter break, giving you ample opportunity to refresh and spend time with friends and family. Health Benefits - Our healthcare program includes medical, dental, and vision coverage, with multiple plan options so you can choose what works best for you and your family. Fertility assistance is also included. Retirement - Invoca offers a 401(k) plan through Fidelity with a company match of up to 4%. Stock Options - All employees are invited to share in Invoca's success through stock options. Mental Health Program- Well-being support on a broad range of issues is available through our SpringHealth program. Paid Family Leave - Up to 6 weeks of 100% paid leave is provided for baby bonding, adoption, and caring for family members. Paid Medical Leave - Up to 12 weeks of 100% paid leave is provided for childbirth and medical needs. InVacation - As a thank-you to our long-term team members, we offer a bonus after 7 years of service. Wellness Subsidy - We provide a subsidy that can be applied toward gym memberships, fitness classes, and more. Position Base Range - Salary Range $107,000 - $161,000/yr plus bonus potential DEI Statement Our company is committed to creating a culture that is not only grounded in continuous learning, teamwork, and customer success, but is fair, equitable, and welcoming for everyone.” Gregg Johnson CEO And to us, diversity and inclusion means even more than treating current employees well and making them feel welcome. It also means proactively hiring people who bring different insights because of their unique demographics, ways of thinking, and prior experiences. We intend to continue hiring great people and protecting our culture so everyone can be themselves and speak their minds. That way Invoca will always be a place filled with laughter, energy, hard work, thoughtfulness and respect. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace. #LI-Remote
    $107k-161k yearly Auto-Apply 60d+ ago
  • Information Systems Security Officer (ISSO) II - Lompoc, CA

    General Dynamics Information Technology 4.7company rating

    Information security analyst job in Lompoc, CA

    **Req ID:** RQ212157 **Type of Requisition:** Regular **Clearance Level Must Be Able to Obtain:** Top Secret SCI + Polygraph **Public Trust/Other Required:** None **Job Family:** Cyber and IT Risk Management **Skills:** Information Security,Information Security Management,Information System Security **Certifications:** GICSP: Global Industrial Cyber Security Professional - Global Information Assurance Certification (GIAC), GSEC: GIAC Security Essentials Certification - Global Information Assurance Certification (GIAC) - Global Information Assurance Certification (GIAC), Cisco Certified Network Associate (CCNA) Security - Cisco - Cisco **Experience:** 2 + years of related experience **US Citizenship Required:** Yes **Job Description:** The ISSO is responsible for ensuring the appropriate operational security posture is maintained for an information system and as such, works in close collaboration with the ISSM and ISSO. The position shall have the detailed knowledge and expertise required to manage the security aspects of an information system and, in many organizations, is assigned responsibility for the day-to-day security operations of a system. This also will include physical and environmental protection, personnel security, incident handling, and security training and awareness. It will be required to work in close coordination with the ISSM and ISO in monitoring the information system(s) and its environment of operation to include developing and updating the authorization documentation, implementing configuration management across authorization boundaries. This will include assessing the security impact of those changes and making recommendation to the ISSM. The primary function is working within Special Access Programs (SAPs) supporting Department of Defense (DoD) agencies, such as HQ Air Force, Office of the Secretary of Defense (OSD) and Military Compartments efforts. The position will provide "day-to-day" support for Collateral, Sensitive Compartmented Information (SCI) and Special Access Program (SAP) activities. Performance shall include: + Assist the ISSM in meeting their duties and responsibilities + Prepare, review, and update authorization packages + Ensure approved procedures are in place for clearing, sanitizing, and destroying various types of hardware and media + Notify ISSM when changes occur that might affect the authorization determination of the information system(s) + Conduct periodic reviews of information systems to ensure compliance with the security authorization package + Coordinate any changes or modifications to hardware, software, or firmware of a system with the ISSM and AO/DAO prior to the change + Monitor system recovery processes to ensure security features and procedures are properly restored and functioning correctly + Ensure all IS security-related documentation is current and accessible to properly authorized individuals + Ensure audit records are collected, reviewed, and documented (to include any anomalies) + Attend required technical and security training (e.g., operating system, networking, security management) relative to assigned duties + Execute the cyber security portion of the self-inspection, to include provide security coordination and review of all system assessment plans + Identify cyber security vulnerabilities and assist with the implementation of the countermeasures for them + Prepare reports on the status of security safeguards applied to computer systems + Perform ISSO duties in support of in-house and external customers + Conduct security impact analysis activities and provide to the ISSM on all configuration management changes to the authorization boundaries Experience: + 2-5 years related experience + SAP experience **required** + Prior performance in roles such as System, Network Administrator, or ISSO Education: + Bachelor's degree OR Associate's degree in a related area + 2 years' experience OR equivalent experience (4 years) Certifications: + IAT Level II or IAM Level II - within 6 months of hire (Security+ CE, CCNA Security, etc.) Security Clearance: + TS/SCI required + Must be able to Attain - TS/SCI with CI Polygraph Other Requirements: + Must be able to regularly lift up to 50lbs \#AirforceSAPOpportunities The likely salary range for this position is $93,662 - $121,080. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology. Join our Talent Community to stay up to date on our career opportunities and events at ******************** Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
    $93.7k-121.1k yearly 20d ago
  • Senior Information Systems Security Officer (ISSO) - Goleta, CA

    RTX

    Information security analyst job in Goleta, CA

    Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance Security Clearance: Secret - Current At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our cybersecurity team is seeking a Senior Information Systems Security Officer (ISSO) to support our team 100% onsite at our facility in Goleta, California. The successful candidate will interface with the Information Systems Security Manager (ISSM) to ensure adherence with NIST Special Publications, customer directives, and company policies as applicable all NISPOM Chapter 8, DAAPM, JSIG policies. What You Will Do Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness. Investigating information system security violations and help prepare reports specifying corrective and preventative actions. Reviewing and approving (within authority) configuration management requests. Conducting technical and administrative assessments. Integrating new cybersecurity processes, procedures, and tools. Support the creation, review and update of cybersecurity documentation and other technical writing. Qualifications You Must Have Typically requires a University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years' experience. Current IAM Level I certification (Security+ or other). Relevant Experience Considered in any combination: Cybersecurity, systems security or hardening Information Technology Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics) Physical security/security, policework/criminal justice, investigations, or Border Patrol Project or program management, office management, senior administration, or account management Qualifications We Prefer Experience working in DoD classified operating and/or laboratory environments. Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc. Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry. Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF). Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT). Familiarity with large multi-facility networks including various complex components, including Windows and Linux environments. Experience interpreting, implementing, and assessing DISA STIGs. Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication. What We Offer Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. Relocation Eligible - Relocation assistance available Please consider the following role type definition as you apply for this role: Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. We are RTX #LI-Onsite As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote. The salary range for this role is 95,500 USD - 181,700 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act. Privacy Policy and Terms: Click on this link to read the Policy and Terms
    $85k-120k yearly est. Auto-Apply 15d ago
  • Senior Information Systems Security Officer (ISSO) - Goleta, CA

    RTX Corporation

    Information security analyst job in Goleta, CA

    **Country:** United States of America ** Onsite **U.S. Citizen, U.S. Person, or Immigration Status Requirements:** Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance **Security Clearance:** Secret - Current At Raytheon, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world. Our cybersecurity team is seeking a **Senior Information Systems Security Officer (ISSO)** to support our team **100% onsite** at our facility in **Goleta, California.** The successful candidate will interface with the Information Systems Security Manager (ISSM) to ensure adherence with NIST Special Publications, customer directives, and company policies as applicable all NISPOM Chapter 8, DAAPM, JSIG policies. **What You Will Do** + Assessing and monitoring system compliance, auditing, security plan development and delivering information systems security education and awareness. + Investigating information system security violations and help prepare reports specifying corrective and preventative actions. + Reviewing and approving (within authority) configuration management requests. + Conducting technical and administrative assessments. + Integrating new cybersecurity processes, procedures, and tools. + Support the creation, review and update of cybersecurity documentation and other technical writing. **Qualifications You Must Have** + Typically requires a University Degree or equivalent experience and minimum 5 years prior relevant experience, or an Advanced Degree in a related field and minimum 3 years' experience. + Current IAM Level I certification (Security+ or other). + Relevant Experience Considered in any combination: + Cybersecurity, systems security or hardening + Information Technology + Compliance-based auditing using the Risk Management Framework (RMF), DCSA Assessment and Authorization Process Manual (DAAPM), Joint SAP Implementation Guide (JSIG), National Industrial Security Program Operating Manual (NISPOM), and/or non-defense regulations such as FAA, Payment Card Industry (PCI), ISO 9001 Quality Management standards, or HIPPA + Experience working with and/or supporting computer technologies (such as: databases, operating systems, computer network hardware, software programs, hardware troubleshooting or electronics) + Physical security/security, policework/criminal justice, investigations, or Border Patrol + Project or program management, office management, senior administration, or account management **Qualifications We Prefer** + Experience working in DoD classified operating and/or laboratory environments. + Experience with various information system security tools that address vulnerability analysis and mitigation. These may include Splunk, Forcepoint, Ivanti, Tenable, ACAS, HBSS, etc. + Familiarity with implementation of Government directives and policies derived from NIST, CNSSI, DoD, or other Government Regulatory compliance standards within a professional industry. + Experience in the execution of the Assessment & Authorization processes, as defined within the Risk Managed Framework (RMF). + Experience providing technical security consultation for complex, cross-domain, heterogeneous classified networked environments in collaboration with internal/external Customers, Information Technology (IT). + Familiarity with large multi-facility networks including various complex components, including Windows and Linux environments. + Experience interpreting, implementing, and assessing DISA STIGs. + Familiarity with the execution and management of cyber incident response; preservation, containment, and eradication. **What We Offer** Our values drive our actions, behaviors, and performance with a vision for a safer, more connected world. At RTX we value: Trust, Respect, Accountability, Collaboration, and Innovation. Relocation Eligible - Relocation assistance available **Please consider the following role type definition as you apply for this role:** + Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products. We are RTX (**************************************** \#LI-Onsite **_As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote._** The salary range for this role is 95,500 USD - 181,700 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement. Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance. This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply. RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window. _RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act._ **Privacy Policy and Terms:** Click on this link (******************************************************** to read the Policy and Terms Raytheon Technologies is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.
    $85k-120k yearly est. 60d+ ago
  • IT Operation Analyst

    Big Brand Tire & Service 3.6company rating

    Information security analyst job in Moorpark, CA

    The IT Operations Analyst supports the day-to-day operations of the IT department by managing billing, assets, and administrative workflows while providing front-line technical support. This role ensures operational efficiency across IT financial processes, asset lifecycle management, and end-user support. The ideal candidate is detail-oriented, organized, and tech-savvy - capable of balancing administrative accuracy with hands-on IT support in a fast-paced environment. Key Responsibilities Financial & Billing Management Manage and reconcile all IT-related billing, including internet, phone, software subscriptions, and cloud services. Track and process invoices for approval and payment, ensuring coding accuracy to the correct cost centers or departments. Review and validate monthly vendor statements to ensure service accuracy and resolve billing discrepancies. Maintain a monthly billing tracker to forecast and report IT expenses. Assist in budgeting and expense analysis for recurring IT costs. Asset & Inventory Management Maintain an up-to-date inventory of all IT assets (laptops, phones, networking equipment, peripherals, etc.). Track hardware assignments, returns, and warranty status. Support procurement by sourcing quotes and coordinating with vendors. Manage asset lifecycle from acquisition to decommissioning, ensuring accurate documentation. Maintain asset tags and records in the IT asset management (ITAM) or inventory system. Administrative & Credit Card Management Code and reconcile IT credit card purchases accurately within accounting timelines. Work closely with Finance and Procurement to ensure compliance with company purchasing policies. Prepare monthly spend summaries and assist with expense reporting. IT Support (Level 1) Provide first-line support for common IT issues including password resets, hardware troubleshooting, and basic network or connectivity issues. Log and track tickets in the helpdesk system, escalating as needed to Level 2/3 engineers. Support onboarding/offboarding activities including account setup, equipment prep, and retrieval. Maintain documentation for IT processes and user guides. Qualifications Experience: 2+ years in IT administration, coordination, or analyst role preferred. Experience with billing systems, IT asset tracking, or expense reporting tools. Exposure to Microsoft 365, Google Workspace, or similar environments. Skills: Strong Excel/Sheets and data management skills. Attention to detail with high accuracy in record-keeping. Excellent communication and problem-solving abilities. Ability to multitask and manage priorities across finance and IT operations. Benefits Paid vacation and holidays Medical, dental, vision, life, and supplemental insurances 401(k) with company match Employee discounts Big Brand Tire & Service is an Equal Opportunity Employer. We celebrate diversity and are committed to a respectful, inclusive workplace.
    $92k-129k yearly est. Auto-Apply 60d+ ago

Learn more about information security analyst jobs

How much does an information security analyst earn in Santa Barbara, CA?

The average information security analyst in Santa Barbara, CA earns between $78,000 and $163,000 annually. This compares to the national average information security analyst range of $71,000 to $135,000.

Average information security analyst salary in Santa Barbara, CA

$113,000

What are the biggest employers of Information Security Analysts in Santa Barbara, CA?

The biggest employers of Information Security Analysts in Santa Barbara, CA are:
  1. American Riviera Bank
Job type you want
Full Time
Part Time
Internship
Temporary