Navy Exchange Service Command
CYBERSECURITY ENGINEER
Navy Exchange Service Command, Virginia Beach, Virginia, us, 23450
Job Description - CYBERSECURITY ENGINEER (240002WX)
CYBERSECURITY ENGINEER
Job Number:240002WX
Primary LocationOrganizationNEXCOMHQ
Pay Range:
$78,753 to $99,961 Based upon experience
Job Summary:
Grade: NF04, Salary Code 4D. The Cybersecurity Engineer performs a variety of security related tasks including the development and implementation of system information security standards and procedures. They ensure that information systems (IS) are functional and secure within the network environment.
Duties and Responsibilities:
Incumbents of this position must be U.S. Citizens. Responsibilities include:
Provides NEXCOM cybersecurity support, by performing full package analysis of all IT systems, as defined by the Navy Risk Management Framework (RMF) guide.
Uses comprehensive knowledge of information systems security principles and methods and the requirements for assessment and authorization to provide technical leadership in reassessment of installed systems.
Applies knowledge and skills of information systems security principles and methods, the requirements for assessment and authorization of systems testing and evaluation, and performance management methods to conduct security authorizations for installed systems and/or networks, as well as reassessments of installed systems.
Interviews the Information Technology (IT) owner to obtain system or site information. Independently uses this and other available information to evaluate security features of the IT system or site being assessed and authorized. Works extensively with system-level program teams throughout the system lifecycle to ensure they meet DoD 8500 series.
Documents A&A information in the Comprehensive RMF package ensuring internal consistency of the information while ensuring no omissions.
Provides clear and detailed technical feedback on potential risks affecting the systems vulnerability footprint and recommended courses of action to mitigate or consider other options to meet mission requirements while preserving or improving the security postures.
Responsible for continuous monitoring of the system's security posture to ensure ongoing compliance and the timely detection of security issues after authorization, as necessary.
Develops Security Assessment Plan (SAP).
Uses CS tools in development of test plans, including Defense Information System Agency (DISA) Security Test Implementation Guides (STIGs), vulnerability scanners (e.g., SCCVI/SCRI, ACAS), and other tools. Recommends mitigation measures to reduce risk.
Utilizes FedRAMP, PCI, and other third party package authorizations for reciprocity and use within the NEXCOM organization.
Ensures effective implementation of organizational information systems, security regulations, policies and maintaining compliance with higher level requirements. Ability to identify system components, develop and maintain diagrams, assess risks, determine security modes of operation, and recommend new or revised security measures and countermeasures.
Keeps supervisors up to date on all assignments.
Performs other related duties as assigned.
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess and maintain current, two types of certifications as follows:
Certified in Governance Risk and Compliance (CGRC)
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP)
CompTIA Advanced Security Practitioner (CASP+)
GIAC Security Leadership Certification (GSLC)
Technical Certification: Operating System/Computing Environment (OS/CE) certificate of training as dictated by Supervisor and approved by Command Cyber IT/CSWF-PM.
Candidate is also required to sign a Privileged Access Agreement. Candidates without the required certification may be placed into this job but must obtain the required certification within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position in accordance with SECNAV M-5510.30 will require a favorable Single Scope Background Investigation (SSBI).
A total of 7 years of experience, consisting of the following:
Qualified candidates must be U.S. Citizens.
GENERAL EXPERIENCE:
3 years’ experience in security, technical or investigative work which demonstrated the ability and aptitudes required to perform technical, managerial or analytical work involving management information systems.
OR
SUBSTITUTION OF EXPERIENCE FOR EDUCATION:
One year of related academic study above the high school level may be substituted for 9 months of experience up to a maximum of a 4 year bachelor's degree in IT security or computer information systems for 3 years of general experience.
AND
SPECIALIZED EXPERIENCE:
4 years of experience in at least two of the following:Technical analysis for infrastructure architecture;IT security compliance and reporting;Technical risk analysis;Authorization and accreditation.
This position is designated in accordance with SECNAV M-5510.30 and will require a favorable Access National Agency Check and Inquiries (ANACI). Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
#J-18808-Ljbffr
CYBERSECURITY ENGINEER
Job Number:240002WX
Primary LocationOrganizationNEXCOMHQ
Pay Range:
$78,753 to $99,961 Based upon experience
Job Summary:
Grade: NF04, Salary Code 4D. The Cybersecurity Engineer performs a variety of security related tasks including the development and implementation of system information security standards and procedures. They ensure that information systems (IS) are functional and secure within the network environment.
Duties and Responsibilities:
Incumbents of this position must be U.S. Citizens. Responsibilities include:
Provides NEXCOM cybersecurity support, by performing full package analysis of all IT systems, as defined by the Navy Risk Management Framework (RMF) guide.
Uses comprehensive knowledge of information systems security principles and methods and the requirements for assessment and authorization to provide technical leadership in reassessment of installed systems.
Applies knowledge and skills of information systems security principles and methods, the requirements for assessment and authorization of systems testing and evaluation, and performance management methods to conduct security authorizations for installed systems and/or networks, as well as reassessments of installed systems.
Interviews the Information Technology (IT) owner to obtain system or site information. Independently uses this and other available information to evaluate security features of the IT system or site being assessed and authorized. Works extensively with system-level program teams throughout the system lifecycle to ensure they meet DoD 8500 series.
Documents A&A information in the Comprehensive RMF package ensuring internal consistency of the information while ensuring no omissions.
Provides clear and detailed technical feedback on potential risks affecting the systems vulnerability footprint and recommended courses of action to mitigate or consider other options to meet mission requirements while preserving or improving the security postures.
Responsible for continuous monitoring of the system's security posture to ensure ongoing compliance and the timely detection of security issues after authorization, as necessary.
Develops Security Assessment Plan (SAP).
Uses CS tools in development of test plans, including Defense Information System Agency (DISA) Security Test Implementation Guides (STIGs), vulnerability scanners (e.g., SCCVI/SCRI, ACAS), and other tools. Recommends mitigation measures to reduce risk.
Utilizes FedRAMP, PCI, and other third party package authorizations for reciprocity and use within the NEXCOM organization.
Ensures effective implementation of organizational information systems, security regulations, policies and maintaining compliance with higher level requirements. Ability to identify system components, develop and maintain diagrams, assess risks, determine security modes of operation, and recommend new or revised security measures and countermeasures.
Keeps supervisors up to date on all assignments.
Performs other related duties as assigned.
SECNAV M-5239.2, DoN, Information Assurance (IA) Workforce Manual requires incumbents of this position to possess and maintain current, two types of certifications as follows:
Certified in Governance Risk and Compliance (CGRC)
Certified Information Security Manager (CISM)
Certified Information Systems Security Professional (CISSP)
CompTIA Advanced Security Practitioner (CASP+)
GIAC Security Leadership Certification (GSLC)
Technical Certification: Operating System/Computing Environment (OS/CE) certificate of training as dictated by Supervisor and approved by Command Cyber IT/CSWF-PM.
Candidate is also required to sign a Privileged Access Agreement. Candidates without the required certification may be placed into this job but must obtain the required certification within 6 months of appointment; failure to obtain this requirement will result in termination of employment.
This position in accordance with SECNAV M-5510.30 will require a favorable Single Scope Background Investigation (SSBI).
A total of 7 years of experience, consisting of the following:
Qualified candidates must be U.S. Citizens.
GENERAL EXPERIENCE:
3 years’ experience in security, technical or investigative work which demonstrated the ability and aptitudes required to perform technical, managerial or analytical work involving management information systems.
OR
SUBSTITUTION OF EXPERIENCE FOR EDUCATION:
One year of related academic study above the high school level may be substituted for 9 months of experience up to a maximum of a 4 year bachelor's degree in IT security or computer information systems for 3 years of general experience.
AND
SPECIALIZED EXPERIENCE:
4 years of experience in at least two of the following:Technical analysis for infrastructure architecture;IT security compliance and reporting;Technical risk analysis;Authorization and accreditation.
This position is designated in accordance with SECNAV M-5510.30 and will require a favorable Access National Agency Check and Inquiries (ANACI). Candidates must be eligible for and obtain a Secret Clearance, within 6 months of appointment. Failure to obtain will result in termination.
#J-18808-Ljbffr