Security Engineer

• Document a system from a Cybersecurity perspective using Microsoft Office including MS Word, MS Excel and MS Visio and other appropriate tools.
• Derive, document and/or identify system CONOPS for Mission Assurance Categorization per DoDI 8500.2.
• Research and recommend logical and physical solutions that prevent, detect and correct the system to be certified and accredited.
• Apply DISA Security Technical Implementation Guides (STIGs) and NSA recommendations.
• Identify disagreements between as built specifications, security requirements and DoD security policies and recommend approaches to bring the system into compliance.
• Author and revise system requirements and specifications to meet DoD security policies.
• Perform vulnerability tests as Red Team and Blue Team using manual techniques, Assured Compliance Assessment Solution (ACAS) and other similar and appropriate IA and security tools.
• Plan, execute and document risk assessments against known vulnerabilities based upon security approaches and known hacker techniques and exploits.
• Identify and perform security analysis of connectivity relationships between the subject US Naval warfare system and the equipment to which it interfaces, both physically and virtually.
• Lead and perform as ISSO to be focal point for all security matters related to specific sets of information systems.
• Define an Information Assurance Vulnerability Management (IAVM) Plan. Plan, execute and document results of security tests.
• Assist with developing cybersecurity requirements, policy standards, best practices, guidance and procedures for combat systems.
• Conduct cybersecurity related research, analysis and coordination activities in support of DOD cyber assurance and policy efforts at multiple classification levels.
• Participate in working groups to develop cybersecurity strategies to meet emerging threats.
• Develop or use MBSE models to perform cybersecurity analysis.
• Assist with:
• analysis of cybersecurity, intelligence and information technology policy gaps for combat systems.
• cybersecurity system engineering design, analysis and documentation of combat systems.
• developing cybersecurity risk assessment analysis and risk mitigation plans for combat systems.
• developing documentation of cybersecurity requirements, gap analysis, threat analysis, system engineering, risk assessment and mitigation for combat systems.

• Two (2) years program specific security engineering experience working with Navy afloat/tactical combat systems or five (5) years general security engineering experience.
• Two (2) of the five (5) years of engineering experience on Combat Weapons Systems experience in Aegis, SSDS, Zumwalt, or other Navy afloat tactical combat systems.
• Understanding of computer security, military system specifications, DoD Cybersecurity policies for both Land Based and afloat/tactical systems, and the ability to communicate clearly and succinctly in written and oral presentations.

Educational Requirements:

• Certified as IAT Level II or Level III per DoD 8570.01, or successor
• Bachelor’s degree desired

Security Requirements:

• Active DoD Top Secret security clearance
• One (1) engineer will require a TS/SCI clearance

Pulled from the full job description

• Tuition reimbursement
• 401(k)
• Health insurance
• Vision insurance
• Dental insurance
• Profit sharing
• Opportunities for advancement, Imagine One Technology & Management, Ltd., offers a full package of benefits and competitive salary, excellent group medical, vision, and dental programs. 401K savings plan; $4K annual tuition reimbursement ($5K if pursuing master’s degree); employee training, development, and education programs; profit sharing; advancement opportunities; and much more!