Security Administrator

NDI Engineering; West Deptford Township (NJ); On-site; USD 75,000 - 85,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Job summary

NDI Engineering Company is seeking a full‑time Security Administrator/Analyst to join our team in South Jersey. You will establish and enforce security controls and ensure compliance with NIST 800-171R2, ISO 27001 and ISO 27002 while working with our IT team.

You will manage security tools (EMS, SIEM, EDR) and perform continuous reporting on incidents and alerts. On‑site work and after‑hours support may be required for maintenance and emergencies.

Qualifications

• Requires 3–5 years’ experience as a Security Administrator/Analyst.
• Associates Degree or Military Cybersecurity service.
• Certification: CySA+ or CISSP.
• US citizenship and ability to obtain DoD Secret clearance.
• Hands‑on security applications configuration and sustainment experience.

Responsibilities

• Implement, assess and audit security policies, controls and procedures per NIST 171R2 and CMMC.
• Configure and manage security tools to monitor and report on activity and incidents.
• Monitor authentication and access controls; enforce security policies.
• Plan security improvements for networks, servers and devices.
• Train staff on security awareness and procedures.

Skills

CySA+

CISSP

DoD Secret clearance

US citizenship

Security incident analysis

Windows/Linux admin

Security policy enforcement

Education

Associates Degree in Information/Computer Science or related field

Military Service in Cybersecurity

Tools

EMS

SIEM

EDR

Network Analyzer

Email security gateway

Identification/Authentication

Job description

NDI Engineering Company is seeking a full-time Security Administrator/Analyst to join our team in South Jersey to support our growing operations. The ideal candidate will have demonstrated experience in establishing and enforcing security controls, policies and procedures over a company's information systems and networks and ensuring security compliance with established industry standards such as NIST 800-171R2, ISO 27001, and ISO 27002. This position requires “hands‑on” expertise in applying and maintaining off-the-shelf security applications as well as performing continuous reporting/analysis of network and computer activity, security incidents and alerts. The candidate will be working in an established security team in partnership with our IT team to ensure that NDI is compliant with our customers’ security requirements.

Responsibilities

• Implementation, assessment and audit of security policies, controls and procedures in accordance with NIST 171R2 and Cybersecurity Maturity Model Certification (CMMC).
• Manages and configures security applications that monitor activity on the NDI corporate networks and analyzes/reports from those tools to identify unusual behavior and reported security events to prevent unauthorized access, vulnerability scanning and remediation, risk analysis, modification and/or destruction of files, email, operating system or applications.
• Manages, configures and updates NDI security applications/tools that monitor activity on the NDI network. These applications include Endpoint Management System (EMS), Network Analyzer, Endpoint Detection and Response (EDR), SIEM, email security gateway and Identification/Authentication.
• Conduct continuous security assessments, audits, and reviews to identify potential risks and vulnerabilities for remediation to ensure compliance with NIST 800-171R2 and CMMC security control requirements.
• Monitor user authentication and access activities and enforce security access control policies.
• Plan and recommend changes to increase the security of the NDI network and attached devices (servers, workstations, laptops).
• Proactively identifies network vulnerabilities using penetration testing, vulnerability scans and vulnerability assessment reports.
• Implementation and updating NDI business continuity and disaster recovery policies and procedures.
• Implementing network security policies, application security, access control and corporate data safeguards.
• Training fellow employees in security awareness and procedures.

Requirements

• Must be a US citizen and able to qualify for a DoD Secret clearance.
• Associates Degree in Information/Computer Science or related field, or Military Service in Cybersecurity.
• 3-5 years’ experience as System Security Administrator/Security Analyst.
• CompTIA Cybersecurity Analyst (CySA+) or Certified Information Systems Security Professional (CISSP) certification.
• Demonstrated Hands‑On experience in security application configuration, implementation and application sustainment experience (trouble shooting problems, application updates, log file analysis) Knowledge of Windows 11, Windows Server 2022, Esxi and Linux.
• Ability to work on‑site in our offices is required. Ability to provide periodic after‑hours support for infrastructure weekend maintenance and related emergencies.
• Familiarity with NIST Cyber Security Standards (171R2, 800-53R5) or ISO 27001/27002 Security Standard and Cybersecurity Maturity Model Certification (CMMC).
• Good verbal and written communications skills along with ability to implement feedback from engineers, follow work instructions and work somewhat independently are highly desirable traits.

Pay: $75,000 - $85,000

NDI Engineering Company is a privately‑held small business consulting firm. NDI provides engineering and technical services to Government clients chartered with responsibility for the defense of our country. NDI offerings include naval architecture, marine, civil, structural, mechanical, and electrical engineering and design services. NDI has an ISO 9001:20015 Certified Quality System and was a prior recipient of the U.S. Small Business Administration Region II, Prime Contractor of the Year Award. NDI’s corporate office is located in Thorofare, NJ with additional offices at the Naval Business Center, Philadelphia, PA, and Virginia Beach, VA.

NDI Engineering Company is an Equal Opportunity Employer.

This contractor and subcontractor shall abide by the requirements of 41 CFR §§ 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.