Security Administrator

NDI Engineering Company; West Deptford Township (NJ); On-site; USD 75,000 - 85,000; Full time

Job summary

NDI Engineering Company seeks a full-time Security Administrator/Analyst in South Jersey to safeguard information systems and networks. The role emphasizes implementing security controls, enforcing policies, and ensuring compliance with NIST 800-171R2, ISO 27001/27002, and CMMC.

You will work with a security team to manage EMS, SIEM, EDR, and related tools, perform continuous monitoring, and provide after-hours support when needed.

Qualifications

• Associates Degree in Information/Computer Science or related field, or Military Service in Cybersecurity.
• 3-5 years' experience as System Security Administrator/Security Analyst.
• DoD Secret clearance eligibility.
• CySA+ or CISSP certification.
• Hands-on security tool configuration and log analysis.
• Knowledge of Windows 11, Windows Server 2022, ESXi and Linux.

Responsibilities

• Implementation, assessment and audit of security policies and procedures per NIST 171R2 and CMMC.
• Manage and configure security tools to monitor networks and report security events.
• Operate EMS, SIEM, EDR and email security gateways; analyze and remediate threats.
• Conduct continuous security assessments to ensure compliance with standards.
• Monitor authentication/access and enforce security controls.
• Recommend changes to enhance network security and device protection.
• Identify vulnerabilities via testing and scans; coordinate remediation.
• Develop and update business continuity and disaster recovery policies.

Skills

Cybersecurity knowledge

Threat analysis

Communication skills

Team collaboration

On-site work

Education

Associates degree in Information/Computer Science or related field

Tools

EMS

SIEM

EDR

Email gateway

ESXi

Job description

NDI Engineering Company is seeking a full-time Security Administrator/Analyst to join our team in South Jersey to support our growing operations. The ideal candidate will have demonstrated experience in establishing and enforcing security controls, policies and procedures over a company's information systems and networks and ensuring security compliance with established industry standards such as NIST 800-171R2, ISO 27001, and ISO 27002. This position requires "hands-on" expertise in applying and maintaining off-the-shelf security applications as well as performing continuous reporting/analysis of network and computer activity, security incidents and alerts. The candidate will be working in an established security team in partnership with our IT team to ensure that NDI is compliant with our customers' security requirements.

Responsibilities

• Implementation, assessment and audit of security policies, controls and procedures in accordance with NIST 171R2 and Cybersecurity Maturity Model Certification (CMMC).
• Manages and configures security applications that monitor activity on the NDI corporate networks and analyzes/reports from those tools to identify unusual behavior and reported security events to prevent unauthorized access, vulnerability scanning and remediation, risk analysis, modification and/or destruction of files, email, operating system or applications.
• Manages, configures and updates NDI security applications/tools that monitor activity on the NDI network. These applications include Endpoint Management System (EMS), Network Analyzer, Endpoint Detection and Response (EDR), SIEM, email security gateway and Identification/Authentication.
• Conduct continuous security assessments, audits, and reviews to identify potential risks and vulnerabilities for remediation to ensure compliance with NIST 800-171R2 and CMMC security control requirements.
• Monitor user authentication and access activities and enforce security access control policies
• Plan and recommend changes to increase the security of the NDI network and attached devices (servers, workstations, laptops)
• Proactively identifies network vulnerabilities using penetration testing, vulnerability scans and vulnerability assessment reports
• Implementation and updating NDI business continuity and disaster recovery policies and procedures
• Implementing network security policies, application security, access control and corporate data safeguards
• Training fellow employees in security awareness and procedures

Requirements

• Must be a US citizen and able to qualify for a DoD Secret clearance.
• Associates Degree in Information/Computer Science or related field, or Military Service in Cybersecurity
• 3-5 years' experience as System Security Administrator/Security Analyst
• CompTIA Cybersecurity Analyst (CySA+) or Certified Information Systems Security Professional (CISSP) certification.
• Demonstrated Hands-On experience in security application configuration, implementation and application sustainment experience (trouble shooting problems, application updates, log file analysis) Knowledge of Windows 11, Windows Server 2022, Esxi and Linux.
• Ability to work on-site in our offices is required. Ability to provide periodic after-hours support for infrastructure weekend maintenance and related emergencies
• Familiarity with NIST Cyber Security Standards (171R2, 800-53R5) or ISO 27001/27002 Security Standard and Cybersecurity Maturity Model Certification (CMMC)
• Good verbal and written communications skills along with ability to implement feedback from engineers, follow work instructions and work somewhat independently are highly desirable traits.

Pay: $75,000 - $85,000