Information Systems Security Engineer II

KES•San Diego, CA

About The Position

Koam Engineering Systems, Inc. (KES Inc.) is an employee-owned small business specializing in technology innovation and systems integration by combining innovative products and reliable engineering services. Headquartered in San Diego, California and with offices in Gig Harbor, WA KES provides services globally in systems engineering & technical assistance, requirements analysis, software design & development, systems integration & testing, independent verification & validation, and operational & logistic support. Position Summary We are currently seeking an Information Systems Security Engineer II to support cybersecurity engineering, compliance, vulnerability management, and Risk Management Framework activities across Ballistic Missile Defense C4I software, hardware, and Program of Record systems within a Department of Defense test, integration, and evaluation environment. This position is responsible for implementing and maintaining cybersecurity controls, supporting system authorization activities, and ensuring cybersecurity requirements are integrated into systems, networks, and operational processes. The role requires a hands-on cybersecurity professional with experience supporting secure DoD environments, vulnerability scanning, STIG implementation, patch validation, security tool administration, and RMF artifact management. The selected candidate will work closely with the Information Systems Security Officer, system administrators, network engineers, and technical teams to identify vulnerabilities, support remediation, maintain compliance documentation, and strengthen the overall cybersecurity posture of the environment. Experience with ACAS, Nessus, SCAP, eMASS, Trellix, DISA STIGs, Windows, Linux, Hyper-V, and DoD Assessment & Authorization (A&A) processes is highly desired. The selected candidate must be able to assess cybersecurity risk, document technical findings clearly, coordinate remediation activities, and support mission objectives without creating unnecessary impact to system availability or operational readiness.

Requirements

Bachelor’s degree in related fields such as computer science, computer engineering, information systems, network engineering, systems engineering, software engineering or a closely related discipline OR Equivalent specialized knowledge customarily acquired through a combination of military training, formal technical instruction, certifications, and substantial progressively responsible practical experience performing work of comparable scope, complexity, and independent judgment
Security+ (DoD IAT Level II) or ability to meet requirements within three months of employment
Existing U.S. Government DoD granted security clearance/eligibility at the final Secret level.
U.S. Citizenship is required.
Minimum 5 years of progressively responsible experience supporting cybersecurity, information assurance, vulnerability management, RMF, systems administration, network administration, or secure technical operations within a DoD, enterprise, lab, test, or other complex technical environment.
Experience supporting cybersecurity compliance requirements within operational, laboratory, development, test, or integration environments, including STIGs, vulnerability remediation, RMF, ATO support, patching, scan response, or compliance documentation.
Experience using or supporting vulnerability and compliance tools such as ACAS, Nessus, SCAP, eMASS, Trellix, or similar cybersecurity tools.
Experience conducting STIG assessments, reviewing scan results, documenting findings, developing remediation actions, and supporting POA&M or authorization activities.
Experience coordinating cybersecurity remediation with system administrators, network engineers, software teams, test teams, or other technical personnel.
Experience supporting Windows, Linux, Hyper-V, network infrastructure, or application environments from a cybersecurity or compliance perspective.
Experience producing or maintaining cybersecurity documentation, including vulnerability reports, STIG checklists, scan results, RMF artifacts, mitigation statements, implementation evidence, or compliance records.
Ability to assess cybersecurity findings, identify operational impact, prioritize remediation actions, and communicate risks and recommendations clearly to technical and non-technical stakeholders.
Ability to work in a team-oriented, collaborative environment while maintaining sound judgment, documentation discipline, and attention to detail.

Nice To Haves

CompTIA Linux+ certification
CompTIA Network+ certification
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar advanced security certifications
Experience supporting Ballistic Missile Defense, C4I, C5ISR, Navy Program of Record, DoD lab, test, integration, or fleet environments.
Experience with PowerShell, SQL, Hyper-V, Windows Server, Red Hat Enterprise Linux, and network management or monitoring tools such as Nagios, Wireshark, SolarWinds, or similar technologies.
Experience supporting classified and unclassified enclaves in Navy, NIWC Pacific, Missile Defense Agency, or other DoD environments.
Experience supporting continuous monitoring, vulnerability remediation, POA&M management, ATO sustainment, or cybersecurity readiness activities.
Experience working with system administrators, network engineers, software developers, test teams, and government customers to resolve cybersecurity findings without unnecessarily impacting mission operations.

Responsibilities

Support cybersecurity engineering, compliance, vulnerability management, and RMF activities for Ballistic Missile Defense C4I software, hardware, and Program of Record systems.
Implement cybersecurity strategies, controls, and corrective actions in coordination with the Information Systems Security Officer, technical teams, and management.
Conduct security assessments, vulnerability reviews, and compliance checks to identify cybersecurity risks, system weaknesses, and required remediation actions.
Perform DISA STIG assessments for operating systems, applications, databases, network devices, and supporting infrastructure to maintain DoD compliance requirements.
Support vulnerability management using ACAS, Nessus, SCAP, and related tools, including scan preparation, scan execution, plugin updates, scan analysis, vulnerability tracking, and remediation coordination.
Analyze vulnerability findings, assess operational impact, prioritize corrective actions, and coordinate remediation with system administrators, network engineers, and other technical personnel.
Support patch management and security update activities by helping validate applicability, track implementation, confirm remediation, and document results.
Use eMASS and related RMF tools to maintain cybersecurity artifacts, document control implementation, track findings, support authorization activities, and provide evidence for compliance reviews.
Configure, monitor, and support cybersecurity tools, including Trellix products and other endpoint, vulnerability, or compliance management solutions used within the environment.
Support cybersecurity integration across Windows, Linux, Hyper-V, network, and application environments to ensure security controls are implemented without unnecessarily affecting system performance or mission operations.
Coordinate with cybersecurity, systems administration, network engineering, software, test, and leadership personnel to support compliance requirements, technical remediation, system readiness, and operational continuity.
Prepare and communicate cybersecurity status, risks, findings, remediation progress, and recommended actions to the ISSO, management, technical teams, and customers as required.
Produce and maintain cybersecurity documentation, including scan results, STIG checklists, vulnerability reports, mitigation statements, RMF artifacts, POA&M inputs, implementation evidence, and compliance records.