NAVAIR Information Assurance / Security Engineer

AMERICAN SYSTEMS•California, MD

About The Position

As our next Information Assurance / Security Engineer, Associate Principal supporting NAVAIR, you'll collaborate with talented professionals to create innovative, mission-critical solutions that empower naval aviation and defense operations. Your expertise will help shape cutting-edge systems, enhance national security, and drive technological advancement for our nation.

Requirements

Active DoD Secret clearance, ability to obtain Top Secret clearance. Must be a U.S. Citizen
Bachelors Degree in IT related discipline
Minimum of (10) ten years of IT or cybersecurity experience in roles such as System Administrator, Network Administrator, Information Systems Security Officer (ISSO) or other related roles.
Experience with security tools and technologies used for monitoring and protecting information systems.
Strong understanding of cybersecurity principles, practices, and standards.

Responsibilities

Perform duties and responsibilities of an ISSO for SAP networks when required.
Support in the duties and responsibilities of managing the Common Configuration Control Board (CCB) process.
Monitor and analyze security logs and alerts to detect and respond to security incidents in a timely manner.
Assess and audit security systems, including firewalls, intrusion detection systems, and access control systems.
Support in the continuous monitoring of security controls and vulnerabilities.
Conduct regular risk assessments and vulnerability assessments to identify potential security threats and vulnerabilities.
Maintain accurate and up-to-date records of RMF documentation, security assessment reports, Plans of Actions and Milestones (POA&Ms), and other relevant documents and uploaded into eMASS IAW DOD frequency requirements.
Complete Security controls Revalidations for all authorizations within a 2-year period.
Assist in authoring and editing Cybersecurity related documents such as ISA, CCB, CIE, MFR or other reports as assigned.
Develop and deliver security awareness and training programs for all employees, contractors, and other stakeholders about cybersecurity, foster a culture of security within the organization, and reduce the risk of security incidents.
Develop, update, and maintain internal IA continuity guides for the Cybersecurity program. Guides should encompass all aspects of task execution, including processes, procedures, and best practices.