Mid-level, hands-on Information Systems Security Engineer at Continental Electronics (an OSI Systems company) who administers and secures classified DoD information systems day to day — Windows/Linux servers, VMs, network services, patching, backups, monitoring, and incident response — while sustaining compliance with NIST 800-53/800-171, RMF, STIGs, and ATO requirements.
Compensation
$116K–$122K / yr
Location
Continental Electronics Corporation
Work setup
Not specified
Seniority
Middle
Employment
Contract
Experience
5+ years
Category
Security
Posted
Skills
authentication
cissp
corrective-action
cybersecurity
linux
nist
vulnerability-management
Must have
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, IT, or related field (or equivalent combination of education and experience)
5 years of related experience (equivalent military or industry experience may be substituted)
Demonstrated experience in information security, cybersecurity, information assurance, system administration, or related technical fields
Secret security clearance issued by the U.S. Government prior to selection, and ability to maintain it throughout employment
Practical experience administering Windows and/or Linux servers
Experience with virtual machines, network services, user accounts and access controls, patching, backups, system monitoring, and technical documentation
Experience in a DoD, federal, defense-contractor, regulated, or similar security-conscious environment
Nice to have
Active DoD-issued clearance
Security+ certification
SSCP certification
CAP certification
CySA+ certification
Network+ certification
CISSP Associate
Microsoft Security Certifications
CompTIA or DoD 8140-aligned certifications
Full description
Overview
Continental Electronics Corporation is a leading provider of RF technologies and innovative solutions with 80 years of proven performance. CEC has experienced significant recent growth and has established itself as the go-to supplier for a diversified product line supporting a wide spectrum of markets from commercial products, military customers, to space research laboratories.
The Information System Security Engineer supports the reliable, secure, and compliant operation of classified information systems, networks, and supporting infrastructure. This position performs day to day administration of servers, virtualized environments, operating systems, network services, user services, storage, backups, cybersecurity, and network-connected systems in support of organizational and customer mission requirements.
The Information System Security Engineer works closely with Information System Security Officers (ISSOs), Information System Security Manager, program personnel, and other stakeholders. The Information System Security Engineer will maintain system availability, implement approved changes, remediate technical issues, and sustain the security posture of the environment.
This is a hands-on, mid-level technical position. The successful candidate will have practical experience administering Windows and/or Linux servers, virtual machines, network services, user accounts and access controls, patching, backups, system monitoring, and technical documentation in a DoD, federal, defense-contractor, regulated, or similar security-conscious environment.
Responsibilities
Contribute to the implementation and maintenance of cybersecurity programs for classified systems
Configure, maintain, troubleshoot, and document systems prior to and after they receive an Authorization to Operate (ATO)
Contribute greatly to success of compliance activities associated with NIST SP 800-171, NIST SP 800-53, RMF, applicable STIGs and DCSA and Customer requirements
Monitor security tools, system logs, audit records, and vulnerability scan results
Monitor and respond to cybersecurity threats and analysis by reviewing alerts, indicators of compromise, system activity, and security events for potential risks
Assist with vulnerability management activities, including scan coordination, risk validation, remediation tracking, and verification of corrective actions
Assist with developing, updating, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and other cybersecurity documentation
Devise new Plans of Actions and Milestones when necessary
Support system accreditation and authorization activities, including preparation of ATO packages and supporting artifacts
Participate in security assessments, self-inspections, customer audits, and government reviews.
Track remediation activities for identified vulnerabilities and security findings
Coordinate with Information System Security Managers (ISSMs), Facility Security Officers (FSOs), network administrators, and program teams to ensure compliance requirements are met
Assist with incident response activities, investigations, and reporting requirements
Maintain cybersecurity records and evidence required for audits and assessments
Perform day to day security administration and continuous monitoring activities
Support user account reviews, access control validation, and privileged account management activities
Promote cybersecurity hygiene across systems and users, including secure configuration, least privilege, strong authentication, patch awareness, and protection of sensitive data
Ensure proper handling, storage, transmission, and destruction of classified and Controlled Unclassified Information (CUI)
Participate in security awareness and user training initiatives
Stay informed of emerging threats, vulnerabilities, and changes to regulatory requirements
Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork
Demonstrate behavior consistent with the company’s Code of Ethics and Conduct
It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem
Duties may be modified or assigned at any time to meet the needs of the business
Qualifications
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; or equivalent combination of education and relevant experience
5 years of related experience
Equivalent military or industry experience may be substituted
Demonstrated experience in information security, cybersecurity, information assurance, system administration, or related technical fields
Candidates must possess at minimum a Secret security clearance issued by the U.S. Government prior to selection. Active DoD-issued clearances are preferred, although not required. Selected candidate must also be able to maintain the required clearance throughout the course of their employment
Certifications (Preferred)
· Security+
· SSCP
· CAP
· CySA+
· Network+
· Certified Information Systems Security Professional (CISSP) Associate
· Microsoft Security Certifications
· CompTIA or DoD 8140-aligned certifications
Physical Demands
While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee must frequently lift or move objects up to 10 pounds and occasionally lift or move objects up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision and ability to adjust focus.
Please review our benefits here: Life at OSI
Pay may range from $116,000 to $122,000 annually
The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.
Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.
NOTICE TO THIRD PARTY AGENCIES
OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.
Equal Opportunity Employer - Disability and VeteranKnow Your Rights
Poster Link:
OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.