Associate Computer Security Engineer-Command Controls, Cyber Security

UDR Consulting Inc•Aiken, SC

2d•Onsite

About The Position

UDR is seeking qualified candidates for an Associate Computer Security Engineer- Command Controls, Cyber Security opportunity for our customer in Aiken, SC to support the Savannah River Site. Under regular supervision, this role assists with the investigation, design, and development of software and/or hardware security technologies for SRS. The position involves working with vendors to develop technical solutions for site computer security needs, maintaining the integrity of computer workstations, servers, and networks through access controls and software lifecycle processes, and ensuring data integrity and confidentiality through encryption and data retention technologies. The role also requires increasing technical abilities through specialized training and ensuring site/company policies and procedures align with customer requirements and are evaluated for effectiveness and proper implementation. Safety is a primary responsibility, requiring adherence to safety training and rules, and taking steps to stop work if unsafe conditions arise.

Requirements

Bachelor degree in an IT related discipline (e.g., Information Technology, Computer Technology, Software Engineering, Computer Science, Computer Engineering); or Non-related Bachelor degree with 2 years proven performance in related assignment(s); or Associate Degree in IT related discipline (e.g. Information Technology, Computer Technology, Software Engineering, Computer Science, Computer Engineering) with 2 years proven performance in related assignment(s); or Non-related Associate Degree with 4 years proven performance in related assignment(s). In lieu of degree, a high school diploma with at least 6 years of equivalent knowledge and experience is acceptable.
Knowledge of computer and network digital systems used in business or process applications.
Must be able to participate in group problem solving including communicating effectively with both technical and nontechnical personnel, respect the ideas of others and accept the judgment of the group.
Must be familiar with available resource materials and be able to conduct timely research.
Must have a sense of when to ask for help and be comfortable in accepting guidance from other more senior technical personnel.
Candidate must be able to obtain and maintain a DOE “Q” security clearance.
Knowledge of basic cybersecurity protections, principles, or frameworks. (Required)
Knowledge of basic computer and networking concepts, principles, and practices. (Required)
Strong written communication and composition abilities. (Required)
Demonstrated willingness to learn complex cybersecurity requirements and regulatory environments. (Required)
Ability to work on-site with limited teleworking options. (Required)
Strong research and analytical skills. (Required)

Nice To Haves

Detailed knowledge in specific operating systems is desirable.
Exposure to NIST SP 800-series guidance or the Risk Management Framework. (preferred)
Experience supporting cyber security concepts such as categorization, control selection, implementation, assessment, authorization, and continuous monitoring (preferred)
Familiarity with governance, compliance, or technical documentation. (preferred)

Responsibilities

Assist with the investigation, design, and development of software and/or hardware security technologies for SRS.
Support the security of SRS resources through designing/implementing/evaluating measures tied to the NIST Core Cyber Framework: Identify, Detect, Respond and Recover.
Work with vendors to develop technical solutions for site computer security needs.
Maintain the integrity of computer workstations, servers, and networks by maintaining access controls and software lifecycle process as needed.
Ensure data integrity and confidentiality through implementing the use of both encryption and data retention technologies.
Increase technical abilities through specialized vendor training, manuals and technical journals, software seminars, informational meetings, and practical experience.
Ensure that site/company policies and procedures are tied to customer requirements and are evaluated for effectiveness and proper implementation.
Assist in developing, documenting, and maintaining common control implementations and associated artifacts.
Support activities related to the NIST RMF lifecycle, including categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Conduct in-depth research on cybersecurity policies, NIST guidance, DOE/NNSA directives, and industry best practices.
Prepare and update security documentation such as control implementation summaries, procedures, and system security artifacts.
Collaborate with senior cybersecurity staff to ensure consistent application of cybersecurity requirements.
Participate in internal assessments, gap analyses, and compliance reviews.