CAE
Information System Security Engineer
CAE, Greendale, Wisconsin, United States, 53129
USA-TX-Arlington-2200 Arlington Downs Rd
CAE Vision:
Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.CAE Defense & Security Mission:
CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.CAE Values:
Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.What We Have to Offer:Comprehensive and competitive benefits package and flexibility that promotes work-life balanceA work environment where all employees are valued, respected and safeFreedom to succeed by enabling team members to deliver, take initiatives and make decisionsRecognition, professional development, advancement and having fun!Summary:CAE is seeking an Information System Security Engineer (ISSE) for providing technical expertise and support to CAE programs and Cybersecurity staff. The ISSE’s priority is responsibility for management, implementation and testing of our Program’s Cybersecurity Requirements.The ISSE is involved in most cyber-related technical decision making on programs. The ISSE advises the ISSM and ISSOs. The ISSE is involved in producing artifacts for the ATO’s body of evidence. The ISSE participates with software and hardware approvals assisting with research, providing analysis, assessing risk and making recommendations. The ISSE also works with the ISSM to produce Cybersecurity Impact Evaluations (CIE) to be reviewed/approved by the customer (for system changes). The ISSE has a thorough grasp of the Cyber requirements and system capabilities. The ISSE’s knowledge is required and must be on hand for the Authorization Event. The ISSE understands and helps define system architecture. The ISSE understands the security requirements and the tools required to satisfy those requirements. The ISSE understands how the simulator components interact and communicate.ESSENTIAL DUTIES AND RESPONSIBILITIES:Assist in preparing, maintaining, and implementing SSPs, under ISSM oversight, for government approval.Participate in update/management of SCTM.Assist in authoring and updating the Risk Assessment Report (RAR)Assist in creating and maintaining System Diagrams, Data Flow Diagrams, Boundary diagrams.Update of Ports Protocols and Services.Assist in POA&M ManagementParticipate in Creating and executing the Security Assessment Plan/Procedures.Assist in gathering COVs/LOVs and maintaining the sanitization plan.Facilitate Software/Hardware Approvals.Assist in Technical Security Management: Firewalls, Data Protection Controls, Patching, Encryption, Certificates, vulnerability scanning (ACAS/SCAP/E-STIG).Continuous Monitoring · Patch/STIG · Annual ATO Package Review · Peer Reviewing program security documents.Attending and presenting in Design reviews, Program Meetings, Technical Interchange Meetings and IPT meetings.Assist in compliance monitoring. Reviewing, evaluating and updating STIG Checklists.Participate in providing input to Proposal cost and technical volumes.Assist in Cost Account Management.High level system administrator skills under Windows or Linux (prefer both).Experience with Software Development.Experience with Configuration Management (version control).QUALIFICATIONS AND EDUCATION REQUIREMENTS:B.S. degree in Computer Science, Computer Engineering, Information Technology, Electrical Engineering or other technical equivalent.Five years directly related experience in implementation of DOD security requirements and contractor/government information security.At least one of DoD 8570.01-M Information Assurance Management (IAM) Level II Approved Baseline Certification (CAP, CASP+CE, CISM, CISSP (or Associate), GSLC, or CCISO.)Experience with NIST Special Pamphlet (SP) 800-37 Guide for Applying the Risk Management Framework, NIST SP 800-53 Rev. 5 Security and Privacy Controls for Federal Information Systems and Organizations.Experience documenting compliance/non-compliance of security controls in the Enterprise Mission Assurance Support Service (eMASS).Incumbent must hold current or be eligible for DOD Personnel Security Clearance at Top Secret level.Thorough knowledge and experience with the NISPOM, DOD security related instructions and directives, specific services’ security related regulations required.Extensive experience with hardware/software platforms to include MS Windows, Linux, UNIX.Military service or military environment familiarity, customs/protocol experience preferred.Ability to communicate, interact and collaborate with management, executive personnel and military personnel including senior officer levels required.Detail oriented; work with minimal supervision, analytical and problem-solving capability.Direct experience with classified DoD networks.Experience obtaining and maintaining ATO for classified network.Must maintain IAM required Certification(s).SECURITY RESPONSIBILITIES:Must comply with all company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources.Incumbent must be eligible for DoD Personal Security Clearance.WORK ENVIRONMENT:Duties performed in an office environment and manufacturing facility. Must be able to work overtime, on and off-shifts as required.PHYSICAL DEMANDS:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.Employee is regularly required to sit, talk or hear, in person, in meetings and by telephone.Manual dexterity to operate computers or other standard office equipment; and reach with hands and arms.Able to support rack mounted equipment (up to 7 feet off the ground).OTHER DUTIES:Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice. CAE USA Inc. is an EOE/AA employer and gives consideration for employment to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.PAY TRANSPARENCY NONDISCRIMINATION PROVISION:The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.Position Type:
RegularEqual Opportunity Employer:
CAE is an equal-opportunity employer committed to diversity, equity, and inclusion. As "One CAE," we take affirmative action to ensure equal opportunity for all applicants regardless of race, nationality, colour, religion, sex, gender identity and expression, sexual orientation, disability, neurodiversity, Veteran status, age, or other legally protected characteristics.If you don't see yourself fully reflected in every job requirement listed in the job posting, we still encourage you to reach out and apply. At CAE, everyone is welcome to contribute to our success. If reasonable accommodation is needed to participate in the job application or interview process, please get in touch with us at rh-hr@cae.com.
#J-18808-Ljbffr
CAE Vision:
Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.CAE Defense & Security Mission:
CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.CAE Values:
Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.What We Have to Offer:Comprehensive and competitive benefits package and flexibility that promotes work-life balanceA work environment where all employees are valued, respected and safeFreedom to succeed by enabling team members to deliver, take initiatives and make decisionsRecognition, professional development, advancement and having fun!Summary:CAE is seeking an Information System Security Engineer (ISSE) for providing technical expertise and support to CAE programs and Cybersecurity staff. The ISSE’s priority is responsibility for management, implementation and testing of our Program’s Cybersecurity Requirements.The ISSE is involved in most cyber-related technical decision making on programs. The ISSE advises the ISSM and ISSOs. The ISSE is involved in producing artifacts for the ATO’s body of evidence. The ISSE participates with software and hardware approvals assisting with research, providing analysis, assessing risk and making recommendations. The ISSE also works with the ISSM to produce Cybersecurity Impact Evaluations (CIE) to be reviewed/approved by the customer (for system changes). The ISSE has a thorough grasp of the Cyber requirements and system capabilities. The ISSE’s knowledge is required and must be on hand for the Authorization Event. The ISSE understands and helps define system architecture. The ISSE understands the security requirements and the tools required to satisfy those requirements. The ISSE understands how the simulator components interact and communicate.ESSENTIAL DUTIES AND RESPONSIBILITIES:Assist in preparing, maintaining, and implementing SSPs, under ISSM oversight, for government approval.Participate in update/management of SCTM.Assist in authoring and updating the Risk Assessment Report (RAR)Assist in creating and maintaining System Diagrams, Data Flow Diagrams, Boundary diagrams.Update of Ports Protocols and Services.Assist in POA&M ManagementParticipate in Creating and executing the Security Assessment Plan/Procedures.Assist in gathering COVs/LOVs and maintaining the sanitization plan.Facilitate Software/Hardware Approvals.Assist in Technical Security Management: Firewalls, Data Protection Controls, Patching, Encryption, Certificates, vulnerability scanning (ACAS/SCAP/E-STIG).Continuous Monitoring · Patch/STIG · Annual ATO Package Review · Peer Reviewing program security documents.Attending and presenting in Design reviews, Program Meetings, Technical Interchange Meetings and IPT meetings.Assist in compliance monitoring. Reviewing, evaluating and updating STIG Checklists.Participate in providing input to Proposal cost and technical volumes.Assist in Cost Account Management.High level system administrator skills under Windows or Linux (prefer both).Experience with Software Development.Experience with Configuration Management (version control).QUALIFICATIONS AND EDUCATION REQUIREMENTS:B.S. degree in Computer Science, Computer Engineering, Information Technology, Electrical Engineering or other technical equivalent.Five years directly related experience in implementation of DOD security requirements and contractor/government information security.At least one of DoD 8570.01-M Information Assurance Management (IAM) Level II Approved Baseline Certification (CAP, CASP+CE, CISM, CISSP (or Associate), GSLC, or CCISO.)Experience with NIST Special Pamphlet (SP) 800-37 Guide for Applying the Risk Management Framework, NIST SP 800-53 Rev. 5 Security and Privacy Controls for Federal Information Systems and Organizations.Experience documenting compliance/non-compliance of security controls in the Enterprise Mission Assurance Support Service (eMASS).Incumbent must hold current or be eligible for DOD Personnel Security Clearance at Top Secret level.Thorough knowledge and experience with the NISPOM, DOD security related instructions and directives, specific services’ security related regulations required.Extensive experience with hardware/software platforms to include MS Windows, Linux, UNIX.Military service or military environment familiarity, customs/protocol experience preferred.Ability to communicate, interact and collaborate with management, executive personnel and military personnel including senior officer levels required.Detail oriented; work with minimal supervision, analytical and problem-solving capability.Direct experience with classified DoD networks.Experience obtaining and maintaining ATO for classified network.Must maintain IAM required Certification(s).SECURITY RESPONSIBILITIES:Must comply with all company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources.Incumbent must be eligible for DoD Personal Security Clearance.WORK ENVIRONMENT:Duties performed in an office environment and manufacturing facility. Must be able to work overtime, on and off-shifts as required.PHYSICAL DEMANDS:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.Employee is regularly required to sit, talk or hear, in person, in meetings and by telephone.Manual dexterity to operate computers or other standard office equipment; and reach with hands and arms.Able to support rack mounted equipment (up to 7 feet off the ground).OTHER DUTIES:Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice. CAE USA Inc. is an EOE/AA employer and gives consideration for employment to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.PAY TRANSPARENCY NONDISCRIMINATION PROVISION:The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.Position Type:
RegularEqual Opportunity Employer:
CAE is an equal-opportunity employer committed to diversity, equity, and inclusion. As "One CAE," we take affirmative action to ensure equal opportunity for all applicants regardless of race, nationality, colour, religion, sex, gender identity and expression, sexual orientation, disability, neurodiversity, Veteran status, age, or other legally protected characteristics.If you don't see yourself fully reflected in every job requirement listed in the job posting, we still encourage you to reach out and apply. At CAE, everyone is welcome to contribute to our success. If reasonable accommodation is needed to participate in the job application or interview process, please get in touch with us at rh-hr@cae.com.
#J-18808-Ljbffr