Security Administrator

ndiengineering; West Deptford Township (NJ); On-site; USD 75,000 - 85,000; Full time

Job summary

NDI Engineering Company is seeking a full-time Security Administrator/Analyst to join our team in South Jersey to support our growing operations.

The ideal candidate will have demonstrated experience in establishing and enforcing security controls, policies and procedures over a company's information systems and networks and ensuring security compliance with established industry standards such as NIST 800-171R2, ISO 27001, and ISO 27002.

Qualifications

• Experience establishing and enforcing security controls, policies and procedures.
• Hands-on experience with security applications and log analysis.
• Familiarity with NIST 800-171R2, ISO 27001/27002, and CMMC requirements.

Responsibilities

• Audit and implement security policies and controls per NIST 171R2 and CMMC.
• Configure and monitor security tools to detect, report and remediate incidents.
• Manage security applications/tools including EMS, EDR, SIEM and email gateway.
• Perform continuous security assessments to identify vulnerabilities and remediation steps.
• Monitor authentication and access controls across the network and devices.
• Recommend changes to increase network and device security.

Skills

Security

Incident response

Policy enforcement

Education

CySA+/CISSP certification

Tools

EMS

EDR

SIEM

Email gateway

Job description

NDI Engineering Company is seeking afull-timeSecurity Administrator/Analyst to join our team in South Jersey to support our growing operations. The ideal candidate will have demonstrated experience in establishing and enforcing security controls, policies and procedures over a company's information systems and networksand ensuring security compliance with established industry standards such as NIST 800-171R2, ISO 27001, and ISO 27002. This position requires “hands-on” expertise in applying and maintaining off-the-shelf security applications as well as performing continuous reporting/analysis of network and computer activity, security incidents and alerts.The candidate will be working in an established security team in partnership with our IT team to ensure that NDI is compliant with ourcustomers’security requirements.

Responsibilities

• Implementation, assessment and audit of security policies, controls and procedures in accordance with NIST 171R2 and Cybersecurity Maturity Model Certification (CMMC).
• Manages and configures security applications that monitor activity on the NDI corporate networks and analyzes/reports from those tools to identify unusual behavior and reported security events to preventunauthorized access,vulnerability scanning and remediation, risk analysis,modification and/or destructionof files, email, operating system or applications.
• Manages, configures and updates NDI security applications/tools that monitor activity on the NDI network. These applicationsincludeEndpoint Management System (EMS), Network Analyzer, Endpoint Detection and Response (EDR), SIEM, email security gateway and Identification/Authentication.
• Conduct continuous security assessments, audits, and reviews to identify potential risks and vulnerabilities for remediation to ensure compliance with NIST 800-171R2 and CMMC security control requirements.
• Monitor user authentication and access activities and enforce security access control policies
• Plan andrecommendchanges to increase the security of the NDI network and attached devices (servers, workstations, laptops)
• Proactively identifies network vulnerabilitiesusingpenetration testing, vulnerability scans and vulnerability assessment reports
• Implementation and updatingNDIbusiness continuity and disaster recoverypolicies and procedures
• Implementing network security policies, application security, access control and corporate data safeguards
• Training fellow employees in security awareness and procedures

Requirements

• Must be a US citizen and able to qualify for a DoD Secret clearance.
• Associates Degree in Information/Computer Scienceor related field,or Military Service in Cybersecurity
• 3-5 years’ experience as System Security Administrator/Security Analyst
• CompTIA Cybersecurity Analyst (CySA+) or Certified Information Systems Security Professional (CISSP) certification.
• DemonstratedHands-Onexperience insecurity application configuration, implementation and application sustainment experience (trouble shooting problems, application updates, log file analysis) Knowledge of Windows 11, Windows Server 2022, Esxi and Linux.
• Ability to work on-site in our offices is required. Ability to provide periodic after-hours support for infrastructure weekend maintenance and related emergencies
• Familiarity with NIST Cyber Security Standards (171R2, 800-53R5) or ISO 27001/27002Security Standard andCybersecurity Maturity Model Certification (CMMC)
• Good verbal and written communications skills along with ability to implement feedback from engineers, follow work instructions and work somewhat independently are highly desirable traits.

Pay: $75,000 - $85,000

NDI Engineering Company is a privately-held small business consulting firm. NDI provides engineering and technical services to Government clients chartered with responsibility for the defense of our country. NDI offerings include naval architecture, marine, civil, structural, mechanical, and electrical engineering and design services. NDI has an ISO 9001:20015 Certified Quality System and was a prior recipient of the U.S. Small Business Administration Region II, Prime Contractor of the Year Award. NDI's corporate office is located in Thorofare, NJ with additional offices at the Naval Business Center, Philadelphia, PA, and Virginia Beach, VA.

NDI Engineering Company is an Equal Opportunity Employer. This contractor and subcontractor shall abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.