Information System Security Engineer
About The Position
CommIT Enterprises, Inc. is seeking a Junior Information Systems Security Engineer to join its team in Oceanside, California. The role supports the Naval Surface Warfare Center, Indian Head Division (NSWC IHD) client in planning and executing cybersecurity requirements for PM Aviation Command and Control and Sensor Netting (AC2SN) systems and ensuring adherence to the DoD Risk Management Framework (RMF). Frequent customer engagement is required to understand and resolve technical issues and support accurate, timely delivery of products for supported programs. The engineer supports security authorization and assessment activities for assigned systems, including creating authorization records, categorizing systems, determining security controls, preparing cybersecurity strategies and plans, and coordinating reviews with Security Control Assessors (SCAs), Authorizing Officials (AOs), and Security Control Validators (SCVs). The role also supports control implementation and testing, vulnerability tracking, authorization-package submission, and continuous monitoring of system security posture.
Requirements
- Three years of professional experience.
- At least two years of experience defining security programs or processes for protecting sensitive or classified information.
- Security+ certification or equivalent.
- Secret clearance.
- Experience working in a team-oriented, collaborative environment.
- Four years of systems-related experience or DoD 8570 IAT Level II qualifications may substitute for a bachelor’s degree.
Nice To Haves
- Bachelor’s degree from an accredited college or university in Computer Science or Information Management is preferred.
Responsibilities
- Create authorization package records in MCCAST or eMASS for assigned systems.
- Support identification of system types and special considerations to support categorization.
- Support determination of DFIA defense level, CYBERSAFE grade, and security categorization in accordance with CNSSI 1253.
- Support generation of security controls based on applicable levels, grades, categorizations, and overlays.
- Assess and document the security control set and determine control applicability and compliance.
- Develop Cyber Security Strategies based on assigned systems’ security categorizations.
- Develop Security Plans and Information System Continuous Monitoring strategies in MCCAST or eMASS.
- Support SCA and AO reviews of the security control set and address feedback.
- Collaborate with the NSWC IHD AC2SN lead and SCV to develop the Security Assessment Plan.
- Support implementation and testing of the security control set and document pre-assessment results in POA&Ms and Security Assessment Reports.
- Support SCA and AO reviews of pre-assessment POA&Ms and Security Assessment Reports and address feedback.
- Assist the NSWC IHD AC2SN lead with updates to Security Validation POA&Ms addressing vulnerabilities verified during official security assessments.
- Support completion, assembly, and submission of Security Authorization Packages for SCA and AO review and AO authorization.
- Support SCA and AO reviews of Security Authorization Packages and address feedback.
- Support maintenance of assigned systems’ security posture in accordance with ISCM strategies.
- Support planning and performing cybersecurity testing through continuous assessment of assigned systems’ security posture.
- Assist with security testing required for A&A self-assessments.
- Engage with customers to understand and resolve technical issues and support timely delivery of program products.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
