Information System Security Engineer

Noblis • Philadelphia, PA

3d • Onsite

About The Position

Noblis MSD is seeking an Information System Security Engineer (ISSE) to help protect U.S. Navy ships and vessels from cyber threats. The role supports Hull, Mechanical, and Electrical (HM&E) Combat Support Systems for U.S. Navy surface ships and related equipment. Noblis MSD supports NAVSEA and the Naval Surface Warfare Center Philadelphia Division in research, development, testing and evaluation, acquisition, engineering, systems integration, in-service and fleet engineering, cybersecurity, logistics, and life-cycle savings. This is an onsite position based at the Navy Yard in Philadelphia, Pennsylvania.

The ISSE designs, implements, tests, and fields secure systems, networks, and architectures; supports security compliance with NIST, DoD, and Navy requirements; and conducts certification and testing under the Risk Management Framework (RMF). The role also develops security policies and technical publications, supports authorization and assessment activities, tracks and mitigates vulnerabilities, and executes cybersecurity pre-installation checkout procedures on ashore and afloat systems.

Requirements

• Bachelor's degree from an accredited university.
• Active CompTIA Security+ CE certification.
• Three to five or more years of practical experience in a cybersecurity, engineering, testing and evaluation, or A&A (formerly C&A) related field.
• Experience with information assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS).
• May be required to hold an Interim Security Control Assessor qualification.
• Active DoD Secret clearance.
• U.S. citizenship.

Nice To Haves

• Experience with a wide range of modern computing platforms and technologies.
• Experience with modern networks, operating systems, databases, and virtual computing.
• Experience with testing methods, automated tools, plans, and procedures for verification of compliance.
• Experience with vulnerability assessment tools, including ACAS and HBSS.
• Ability to develop and interpret security architectures and data flow diagrams.
• Ability to identify areas of non-compliance risk and propose solutions.
• Exceptional verbal and written communication skills.
• Ability to multitask and deliver high-quality work on time.
• Experience tracking, mitigating, and resolving vulnerabilities.
• Experience installing software, firmware, and security patches.
• Knowledge of industrial control systems.
• Familiarity with Linux, Windows, and VxWorks operating systems.
• Valid U.S. passport or ability to obtain one upon position acceptance.
• Ability to travel at least 10% of the time.

Responsibilities

• Analyze and evaluate requirements to design, implement, test, and field secure systems, networks, and architectures.
• Install and configure secure hardware and software systems, and maintain technological infrastructure.
• Conduct regular security audits and ensure systems are current with security patches.
• Provide technical support to users and troubleshoot security and related issues.
• Manage user accounts and system access.
• Perform data backups and disaster recovery procedures.
• Assess and strengthen system compliance with NIST, DoD, and Navy security requirements.
• Develop and implement information systems security policies throughout the acquisition and information systems lifecycle.
• Conduct certification and testing in accordance with the Risk Management Framework (RMF).
• Support the Government in resolving conflicting system security engineering requirements.
• Develop program technical publications, including Systems Engineering Plans, Security Concepts of Operations, and Cybersecurity Strategy.
• Coordinate with system subject matter experts to identify and develop authorization boundary and architecture diagrams.
• Maintain awareness of evolving security and risk management standards.
• Participate in A&A status meetings and working groups addressing cybersecurity and RMF policies.
• Manage POA&M entries and ensure vulnerabilities are tracked and mitigated.
• Update eMASS artifacts, including Lab Portfolio, Testing Evidence, and Vulnerability POA&M.
• Execute the USN Cybersecurity Pre-Installation Checkout (PICO) Procedure on ashore and afloat systems.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Awards recognizing exceptional performance and demonstration of service standards.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level