Cyber Systems Engineer
About The Position
The Multipurpose Interface Trainer (MIT) team is a cross functional team responsible for delivering cutting edge training systems to submarine fleets of both the US Navy and Royal Australian Navy. The MIT team’s work is fast-paced and exciting; involving the implementation and administration of both on premises and remotely accessible enterprise compute resources running cutting-edge software builds to deliver training for systems and capabilities that are not yet present in the Submarine Fleet. Training is deployed to Navy Bases including San Diego, Pearl Harbor, Bangor, Norfolk, Groton, Kings Bay, and Perth, Australia. As a Cyber Systems Engineer on the MIT team, you will execute cybersecurity operations across secure, classified environments in support of submarine training systems used by both the US Navy and Royal Australian Navy. You will be responsible for deploying, configuring, and maintaining information systems as well monitoring and maintaining their security posture to support system Assessment and Authorization activities, and ensuring compliance with applicable government security frameworks and standards. The ideal candidate brings developing expertise in cybersecurity engineering, demonstrates initiative on assignments, and is comfortable working with moderate supervision in a mission-focused environment.
Requirements
- Bachelor's degree in Systems Engineering, or a related Science, Engineering or Mathematics field, plus a minimum of 2 years of relevant experience; or Master's degree, plus 6 months of relevant experience.
- Department of Defense Secret security clearance is required at time of hire.
- Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information.
- U.S. citizenship is required.
Nice To Haves
- A Bachelor's degree in Cybersecurity, Computer Information Systems, Information Technology, or another related field.
- Foundational understanding of cybersecurity principles, including Risk Management Framework (RMF), STIGs, DIACAP, and government security specifications and guidelines.
- Experience conducting vulnerability assessments and developing remediation plans.
- Experience with Linux and Windows based information systems.
- Familiarity with Assessment and Authorization processes and associated artifact development.
- Written and verbal communication skills, including the ability to clearly report technical findings and security concerns to both technical and non-technical audiences.
- Ability to grasp and apply new information quickly and navigate complex systems and scenarios.
- Takes initiative on assignments with professional execution and little direction required.
- A Master's degree in Cybersecurity, Information Assurance, Computer Information Systems, or another related field.
- Current IAT certifications such as Security+, CISSP, CEH, or CASP+.
- Experience with ACAS/Nessus and SCAP Compliance Checker.
- Experience developing RMF authorization packages and working with ISSMs/ISSOs.
- Familiarity with NIST SP 800-53 security controls and DCSA assessment methodology.
- Experience with TACLANE encryption devices from a security and COMSEC perspective.
- Experience with Linux and Windows Server administration and security hardening.
- Demonstrated ability to be creative, innovative, and responsible with solid decision-making skills.
- Team player who thrives in collaborative environments and is committed to meeting and exceeding personal and team commitments.
- Demonstrated leadership ability.
- Strong interpersonal and communication skills with the ability to professionally represent the program.
Responsibilities
- Perform day-to-day operation and maintenance of security controls across classified information systems including SIPRNet and other secure networks.
- Assist with the deployment and configuration of custom and commercial software to information systems both in development and customer deliverable environments.
- Develop and maintain security documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and contingency plans for new and fielded information systems.
- Contribute to Assessment and Authorization (A&A) activities including preparing authorization package artifacts and coordinating with Information System Security Managers (ISSMs) and Information System Security Officers (ISSOs).
- Conduct vulnerability scans using ACAS/Nessus and SCAP Compliance Checker, interpret results, and develop and track remediation plans.
- Implement and enforce US Government security standards including NIST, DCSA, and COMSEC requirements on classified information systems.
- Apply and maintain Security Technical Implementation Guides (STIGs) across Linux and Windows-based systems.
- Monitor and respond to cybersecurity events and incidents across the classified environment.
- Support continuous monitoring activities to maintain system Authorization to Operate (ATO).
Benefits
- An exciting career path with opportunities for continuous learning and development.
- Research oriented work, alongside award winning teams developing practical solutions for our nation’s security
- Flexible schedules with every other Friday off work, if desired (9/80 schedule)
- Competitive benefits, including 401k matching, flex time off, paid parental leave, healthcare benefits, health & wellness programs, employee resource and social groups, and more
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
