Ready for Whatis Next? At Kratos, we encourage an entrepreneurial spirit balanced with discipline. We work hard, and take care of our customers, employees, and families. Recognized as thought leaders in our industry, we are motivated by creating and delivering innovative solutions to our nation and global customers. Kratos has an exciting opportunity an experienced Information System Security Engineer (ISSE) to support the development of new information systems and to bolster the cybersecurity posture of legacy systems. This role will develop and implement technical solutions to complex cybersecurity requirements. This position is based on multiple DoD Directives; including DoD 5205.07 volumes 1-4; DoDD 5205.02E; DoDI 5025.01, 5205.11, 5200.39, 5220.22, DoDM 3305.13; DoD 8140 series; Intelligence Community Directive Series 500/600/700; NIST 800 series special publications; Executive Orders 13556 and 13636, the Joint Special Access Program Implementation Guide Rev 4, and DISA Security Technical Implementation Guides. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship is required. Travel to customer sites and other program locations will be required. Primary Responsibilities:
- Works with engineering teams to design and develop comprehensive system security architecture to satisfy NIST requirements.
- Provides expert technical support to all areas of cybersecurity portfolio.
- Interfaces with other cybersecurity disciplines to provide technical details as required to support in Authorization to Operate (ATO) activities.
- Incorporates engineering strategies for introducing new technology to established systems.
- Performs cost-benefit analyses to determine whether requirements are best met by manual, software, or hardware functions; making maximum use of commercial off-the-shelf or already developed components.
- Applies knowledge of enterprise IT or engineering needs to design improved processes.
- Develop, execute, and track the performance of security measures to protect information and network infrastructure.
- Identify, define, and document system security requirements and recommend solutions to management.
- Configure, troubleshoot, and maintain security infrastructure software and hardware.
- Coordinates security rules and internal access authorization with IT Operations leadership and management.
- Ensures compliance with security policies and procedures as well as industry-specific regulations.
- Evaluates and recommends security and equipment updates as necessary.
- Prepares and maintains technical documentation.
- Research latest security threats and methods to counteract security risks.
- Authors and executes Security Test and Evaluation plans.
- Provides certification and accreditation support.
- Recommends system enhancements to improve security deficiencies.
- Develops, tests, and integrates computer and network security tools.
- Conducts security program audits, based on RMF requirements, and develops solutions to lessen identified risks.
- Provides information assurance support for the development and implementation of security architectures to meet new and evolving security requirements.
- Provides support to incident response investigations.
- Performs vulnerability assessments including development of risk mitigation strategies.
- Represents the cybersecurity team in working groups and at industry events.
- May participate in business development activities.
- Travel to business and customer remote locations as needed.
Keyword: ISSE, cyber, cybersecurity, RMF, zero trust, CMMC
Required Experience:
- 5-7 years cybersecurity experience.
- 3 years in a supervisory capacity.
- Bacheloris degree.
- Experience in TS//SCI environments.
- Experience in the application of NIST control requirements.
- Experience with CMMC and CUI data handling.
- Experience with AWS cloud computing environments, including FedRAMP compliance and cloud security best practices.
Required Qualifications:
- Expert knowledge of the NIST Risk Management Framework.
- CISSP, CISM, or equivalent cybersecurity certification.
- Ability to prepare detailed BOE artifacts to support ATO requirements.
- Knowledge of new and emerging IT and cybersecurity technologies.
- Network engineering proficiency.
- Advanced system architecture and design expertise.
- Proven history of coordinating complex system upgrades, ideally relying upon self-developed automation.
- Capable of working in a fast-paced team environment.
- Excellent organizational skills.
- Ability to clearly communicate technical concepts orally and in written forms to internal and external audiences.
- Comfortability with briefing large audiences.
- Active TS//SCI security clearance.
Preferred Skills and Experience
- Familiarity with ACAS, Greylog, Nessus, Splunk or similar security tools.
- Experience with agile methodologies and tools like Jira or Confluence.
- Familiarity with containerization products.
- Familiarity with zero trust framework.
- Familiarity with JSIG.
- Experience with Linux.
- Experience supporting satellite ground systems.
#LI-Onsite Competitive salary based on experience and education Salary Range: $125,000-$170,000 Kratos is valued for our ability to design and deliver leading edge, resilient solutions for aerospace communication, control, awareness and mission success across a continuum of offeringsifrom commercial to tailored custom solutions and integrated programs. Customers trust us to stay relevant and know we are in it for the long-haul. We bring both the capability and confidence that our customers value and depend on. And, we always deliver.
From: Kratos Defense
|