Cybersecurity, Engineer I

INFORMATION SYSTEMS SOLUTIONS, INC•San Diego, CA

1h•Onsite

About The Position

Information Systems Solutions (ISS) is seeking a Cybersecurity Engineer I to support the NIWC PAC Information Technology Management Support Services contract. This role is responsible for supporting Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing triage to assess the scope and impact of incidents, identifying vulnerabilities, and recommending remediation strategies. The position requires in-depth knowledge of the Risk Management Framework.

Requirements

Secret Clearance Level
IAT II Certification (CySA+, Security+, CCNA – Security, GICSP, GSEC, SSCP)
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field.
3+ years of relevant experience
Intermediate-level exposure to complex tasks.
Cybersecurity Monitoring and Incident Response
Security Testing, Auditing, and Remediation
Data Analytics and Risk Assessment
Proficiency with IT Security Software and Web Security Tools

Responsibilities

Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations.