Systems Security Engineer

EPS Corporation is seeking a talentedSystems Security Engineerto provide comprehensive cybersecurity support within aDepartment of Defense (DoD)orU.S. Navyenvironment. The ideal candidate will possess a strong background in system security engineering, vulnerability management, and risk assessment, with hands-on experience supporting accreditation and audit processes.

Requirements

• Performvulnerability assessmentsandrisk analyseson networked systems, applications, and devices to ensure compliance with DoD cybersecurity standards.

• Conductvirus and malware scans, identifying and mitigating software threats that could impact system performance or security.

• Support theaccreditation and auditingof information systems in accordance with DoD and Navy security requirements.

• Implement and maintainsecurity controlsto protect information systems and data integrity.

• Collaborate with system administrators, network engineers, and program security teams to resolve findings from scans, assessments, and audits.

• Prepare and maintainsecurity documentation, including risk assessments, plans of action and milestones (POA&Ms), and system security plans (SSPs).

• Contribute to the continuous monitoring and improvement of cybersecurity practices within assigned systems and networks.

• Four (4) yearsof professional experience inIT securitywithin theDoD or Navyenvironment.

• Proven experience performingvulnerability analysis,risk analysis, andmalware detection.

• Qualified experience supportingsystem accreditationandsecurity audits.

• Familiarity with DoD cybersecurity standards, including theRisk Management Framework (RMF)andDISA STIGs.

• Must meetDoD 8570 IAT Level IIcertification requirements (e.g., Security+ CE, CCNA Security, or equivalent).

• Must possess an activeT3 investigation(Secret clearance eligibility).

• Strong attention to detail, analytical thinking, and problem-solving abilities.

Preferred Qualifications

• Experience withvulnerability scanning toolssuch asACAS,Nessus, orSCAP.

• Working knowledge ofeMASSandsystem authorizationprocesses.

• Understanding ofnetwork security,incident response, andconfiguration managementbest practices.