Description Information System Security Engineer The GBS Group has an exciting opportunity for an ISSE. You will work both independently and with a team of Engineering and technical professionals at NAVSEA on Information Systems projects related to Naval ship systems platforms. The position will manufacture systems media and software packages and contribute real value by developing, troubleshooting and verifying solutions providing software/hardware security of Naval platforms. Responsibility included but not limited to:
- Provide technical services in support of delivering cyber-secure systems and solutions including the development and submittal of Risk Management Framework (RMF) risk assessments, implementation of DoD secure system configuration and hardening, requirements identified in Defense Information Systems Agency (DISA) Security.
- Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs), Assured Compliance Assessment Solution (ACAS) vulnerability assessments, anti-virus (AV) scanning, Standard Engineering Process (SEP) artifacts.
- Develop, evaluate, update, and provide feedback on technical documentation.
- Provide analysis of cybersecurity requirements and potential design solutions, providing guidance and direction related to security technologies, performing analysis on cybersecurity collected data and test results, identifying and implementing cybersecurity design, and preparing and maintaining engineering and security related documentation in support of lab functions supporting Situational Awareness systems.
- Document, implement and prioritize patching requirements across applicable system components, provide support for the development and testing of patches to fix vulnerabilities in Windows, Red Hat Enterprise Linux (RHEL) operating systems and associated applications, provide assistance in conducting cybersecurity audits to ensure appropriate implementation and compliance of the security posture.
- Develop, plan, schedule, and execute test plans and test procedures for computer programs and hardware.
- Track and report status on assigned work.
- Actively participate in team and Program meetings as necessary
- Potential travel to attend meetings with sponsors and support shipboard testing requirements.
Qualifications Candidates must possess the following professional experience and qualifications: Minimum Education:
- Bachelor of Science degree in Computer Science, Electrical Engineering, or Computer Engineering or a Cyber Security related degree from an ABET (Accreditation Board for Engineering and Technology) accredited program.
Minimum Experience:
- Two (2) years of professional experience in cyber security engineering Security+ Certification or CISSP Certification
- One (1) year of professional experience with vulnerability analysis tools
- One (1) year of professional experience maintaining and configuring various operating systems such as Windows, Linux, VxWorks, or other Embedded Operating Systems
- Three (3) years of professional experience in IT/Help Desk support and asset management
Required Experience:
- Experience with RMF
- Experience with Linux
- Ability to obtain and maintain a security clearance (US Citizenship Required).
EEO Statement The GBS Group is an equal-opportunity employer. Employment decisions will be based on legitimate, nondiscriminatory business reasons, including merit, qualification, experience, and abilities. Our employment policies will not be influenced or affected by an applicant's or employee's race, color, religion, sex/gender, sexual orientation, gender identity or expression, transgender status, national origin, age, disability, marital or familial status, pregnancy, military/veteran status, genetic information, or any other characteristic protected by law. This policy governs all aspects of the employment relationship, including but not limited to selection, job assignment, compensation, discipline, promotion, termination, and access to benefits and training. Any employee who feels that he or she is or has been the victim of illegal discrimination or violation of this policy should immediately notify the Chief Administrative Officer or Human Resources. Employees may file a legitimate or good faith discrimination complaint without being subject to reprisal.