CAE USA · 12 hours ago
Information System Security Engineer
CAE USA is seeking Information System Security Engineers (ISSE) to provide technical expertise and support to their programs and Cybersecurity staff. The ISSE will be responsible for managing, implementing, and testing cybersecurity requirements, advising on technical decisions, and producing necessary documentation for compliance.
Responsibilities
Assist in preparing, maintaining, and implementing SSPs, under ISSM oversight, for government approval
Provide technical support to the ISSM and ISSO
Participate in update/management of SCTM
Assist in authoring and updating the Risk Assessment Report (RAR)
Author and update the Program Protection Implementation Plan (PPIP)
Assist in creating and maintaining System Diagrams, Data Flow Diagrams, Boundary diagrams
Create/Maintain/Update of Ports Protocols and Services
Sanitization Plans and procedures
Assist in POA&M Management
Participate in Creating and executing the Security Assessment Plan/Procedures
Assist in gathering COVs/LOVs and maintaining the sanitization plan
Facilitate Software/Hardware Approvals
Assist in Technical Security Management: Firewalls, Data Protection Controls
Patching, Encryption, Certificates, vulnerability scanning (ACAS/SCAP/E-STIG)
Continuous Monitoring · Patch/STIG · Annual ATO Package Review · Peer Reviewing program security documents
Attending and presenting in Design reviews, Program Meetings, Technical Interchange Meetings and IPT meetings
Assist in compliance monitoring. Reviewing, evaluating and updating STIG Checklists
Participate in providing input to Proposal cost and technical volumes
Assist in Cost Account Management
High level system administrator skills under Windows or Linux (prefer both)
Experience with system log auditing and analysis (Configuration and Execution)
Experience with Software Development
Experience with Configuration Management (version control)
Occasional travel will be required
Qualification
Required
B.S. degree in Computer Science, Computer Engineering, Information Technology, Electrical Engineering or other technical equivalent
Minimum of 5 years directly related experience in implementation of DOD security requirements and contractor/government information security. Both technical implementation and documentation
At least one of DoD 8570.01-M Information Assurance Management (IAM) Level II Approved Baseline Certification (CAP, CASP+CE, CISM, CISSP (or Associate), GSLC, or CCISO.)
Experience with NIST Special Pamphlet (SP) 800-37 Guide for Applying the Risk Management Framework, NIST SP 800-53 Rev. 5 Security and Privacy Controls for Federal Information Systems and Organizations
Experience documenting compliance/non-compliance of security controls in the Enterprise Mission Assurance Support Service (eMASS)
Incumbents must hold current or be eligible for DOD Personnel Security Clearance at Top Secret level
Thorough knowledge and experience with the NISPOM, DOD security related instructions and directives, specific services' security related regulations required
Extensive experience with hardware/software platforms to include MS Windows, Linux, UNIX
Ability to communicate, interact and collaborate with management, executive personnel and military personnel including senior officer levels required
Detail oriented; work with minimal supervision, analytical and problem-solving capability
Direct experience with classified DoD networks
Experience obtaining and maintaining ATO for classified network
Must maintain IAM required Certification(s)
Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role
Preferred
Experience with System Administration of Windows and Linux Systems is highly desired
deployment
configuration per DoD Guidance (STIG'ing)
patching
scanning (ACAS/SCAP/E-STIG)
scripting (Shell/Powershell/Ansible)
documentation (SSP and work instructions)
sustainment
Benefits
Comprehensive and competitive benefits package and flexibility that promotes work-life balance
A work environment where all employees are valued, respected and safe
Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
Recognition, professional development, advancement and having fun!
Company
CAE USA
CAE USA, located in Tampa Florida, provides modeling and simulation technologies, integrated training solutions and training system support services for various defense and government agencies in the USA, Central and South America.