Systems Security Engineer III

Sierra Nevada Corporation; Southern Pines (NC); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical plans

Dental plans

Vision plans

401(k) with 150% match up to 6%

Life insurance

3 weeks paid time off

Tuition reimbursement

Job summary

Sierra Nevada Corporation is seeking a Systems Security Engineer III to design, implement, and maintain secure IT systems with leadership in incident response and digital forensics. You will work within the Mission Solutions and Technologies (MST) area to support DoD and homeland security projects.

The role requires 5+ years in IT security, DoD RMF experience, and an active or soon-to-be IAT Level III certification. Hybrid work environment with occasional travel is expected.

Qualifications

• Bachelor's degree in Systems Security, Network Engineering, Information Technology, or related Engineering discipline.
• 5+ years of experience in IT security or a related field.
• In absence of a degree, minimum of 9 years of related experience.
• Must have IAT Level III certification (CISSP, CASP, GCIH, etc.) or ability to attain within 6 months of hire.
• Experience in application security tasks (SAST/DAST/SCA) and in using security control assessment tools.
• Strong understanding of DoD STIGs, NIST SPs, and NSA Guides.
• Working knowledge of operating systems and networking concepts.

Responsibilities

• Participate in high-quality interaction with customers, team members, contractors, and government authorization official to achieve IS security objectives.
• Serve as subject matter expert in Information Systems Security during design, integration, or upgrade of software and information systems.
• Develop or review RMF-based documentation for DoD regulations.
• Perform security control assessments to ensure compliance with RMF and military regulations.
• Participate in continuous monitoring activities including vulnerability management, incident response, and accreditation record maintenance in eMASS or XACTA.
• Evaluate work products of IS security team members during design, integration, or upgrade of information systems.

Skills

IAT Level III cert

SAST/DAST/SCA testing

NIST RMF

ACAS/Nessus

SCAP/CHECKER

DoD STIGs knowledge

Kubernetes/CNCF familiarity

Communication skills

Education

Bachelor's degree in Systems Security, Network Engineering, Information Technology, or related Engineering discipline

Tools

eMASS

XACTA

Job description

Are you looking for an opportunity to deepen your IT skills in a meaningful work environment that supports and protects explorers and heroes? As a Systems Security Engineer III, you will play a pivotal role in ensuring the security of our IT infrastructure. You will lead the design, implementation, and maintenance of secure IT systems, and take charge of high-level incident response and digital forensics. The Mission Solutions and Technologies (MST) business area provides affordable, turn-key command/control, communications, integrated ISR, force protection and security solutions worldwide. The MST team has a long legacy of supporting the Department of Defense, Department of Homeland Security, commercial and international customers with years of experience in platform operations, engineering and full lifecycle management across domains – air, land, sea, space and cyber.

Responsibilities

• Participate in high-quality interaction with customers, team members, contractors, and ultimately the government authorization official to achieve the directed Information Systems Security objectives.
• Serve as a subject matter expert in the field of Information Systems Security and provide guidance during the design, integration, or upgrade of software applications and information systems.
• Combined knowledge of Information Systems Security policies and operational understanding to develop or review Assessment & Authorization documentation based upon the NIST Risk Management Framework and other U.S. Department of Defense regulations.
• Perform random and scheduled security control assessments of software applications and information systems to ensure compliance with requirements based upon NIST Risk Management Framework and other U.S. military regulations.
• Participate in continuous monitoring activities such as vulnerability management, incident response, and accreditation record maintenance in systems such as eMASS or XACTA.
• Perform work product evaluation of other Information Systems Security team members during the design, integration, or upgrade of new or existing information systems.

Qualifications – You Must Have

• Bachelor's degree in Systems Security, Network Engineering, Information Technology, or related Engineering discipline
• 5+ years of experience in IT security or a related field.
• Relevant experience can be considered as a substitute for the required educational qualifications.
• In the absence of a degree, a minimum of 9 years of related experience is required.
• Higher level relevant degree may substitute for experience.
• Must have IAT Level III certification (CISSP, CASP, GCIH, etc.) or ability to attain within 6 months of hire.
• Demonstrated experience working in an application security environment and performing application security related tasks such as SAST/DAST/SCA testing.
• Demonstrated experience with security control assessment tools such as ACAS / Tenable Nessus, SCAP Compliance Checker, Static Application Security Testing tools and Dynamic Application Security Testing tools.
• Strong understanding of DoD applicable Security Technical Implementation Guides (STIGs), NIST special publications, and NSA Guides.
• Working knowledge of operating systems and networking concepts.
• Demonstrated ability to effectively communicate, complete tasks and assignments on time, problem solve, work in a team environment, and work independently when necessary.

Qualifications – We Prefer

• Experience implementing DevSecOps processes within existing DevOps pipelines.
• Experience configuring, deploying, and securing applications within the modern Kubernetes / CNCF landscape.
• Experience working with the RMF accreditation process for a Department of Defense customer.
• Experience working with deployed tactical information systems.
• Additional information security industry certifications such as the CISSP-ISSEP, CISM, or C|EH Certification

Essential Functions

• Ability to work primarily at a computer for extended periods.
• Capability to participate in on-call rotation for incident response.
• Must be able to lift up to 25 lbs occasionally.
• Ability to work in an office or hybrid environment.
• Occasional travel may be required.

Benefits

• medical
• dental
• vision plans
• 401(k) with 150% match up to 6%
• life insurance
• 3 weeks paid time off
• tuition reimbursement

SNC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with 150% match up to 6%, life insurance, 3 weeks paid time off, tuition reimbursement, and more.

This posting will be open for application for a minimum of 5 days and may be extended based on business needs.

IMPORTANT NOTICE

IMPORTANT NOTICE: This position requires current/active Top Secret U.S. Security Clearance.

U.S. Citizenship status is required as this position needs an active U.S. Security Clearance for employment. Non-U.S. Citizens may not be eligible to obtain a security clearance.

The Department of Defense Consolidated Adjudications Facility (DoD CAF), a federal government agency, handles the adjudicative aspects of the security clearance eligibility process for industry applicants. Adjudicative factors which affect the outcome of the eligibility determination include, but are not limited to, allegiance to the U.S., foreign influence, foreign preference, criminal conduct, security violations, and illegal drug use. Learn more about the background check process for Security Clearances.

SNC is an Equal Opportunity Employer committed to an environment free of discrimination. Employment decisions are made based on merit without regard to race, color, age, religion, sex, national origin, disability, status as a protected veteran or other characteristics protected by law.

SNC is a global leader in aerospace and national security committed to moving the American Dream forward. We’re known and respected for our mission and execution focus, agility, and disruptive and rapid innovation. We provide leading edge technologies and transformative solutions that support our nation’s most critical security needs. If you are mission-focused, thrive in collaborative environments, and want to make our country stronger with state‑of‑the‑art technologies that safeguard freedom, SNC is an Equal Opportunity Employer committed to an environment free of discrimination. Employment decisions are made based on merit without regard to race, color, age, religion, sex, national origin, disability, status as a protected veteran or other characteristics protected by law. SNC is a trusted global leader in aerospace and national security. Our innovative solutions enable connected protection through command, control and communications systems, as well as ISR, cyber, electromagnetic spectrum management, and other high capabilities for systems across all domains – sea, land, air, space and cyber. As a longstanding leader in defense technology, SNC is the optimum intersection of commercial, defense and non‑traditional contractors. We are one of the only privately owned mid‑tier A&D contractors and we pride ourselves on our ability to invest early and often to ensure mission success on or ahead of schedule. It’s part of our mission to always stay one step ahead; working on solutions today to solve the problems of tomorrow. Founded in 1963, SNC is owned by Chairwoman Eren Ozmen and CEO Fatih Ozmen.