Satellite Communications System Security Engineer, Sr

The Opportunity:

Are you seeking an opportunity to enhance your expertise in satellite communications systems, including devices, implementing security systems, and identifying tools, that will support our country and safeguard our nation? As a Satellite Communications Systems Security Engineer, you will identify the necessary tools, security systems, devices, and applications required to assess vulnerabilities and recommend optimal solutions and security strategies. Your experience is needed to develop and implement security solutions that protect our military and infrastructure.

Join a team of communications and systems engineers supporting engineering, sustainment, and management of communications systems. You’ll perform ongoing system analyst activities for programs, perform risk assessments of systems and equipment, assist engineers with identifying solutions for vulnerabilities, create and map Security Technical Implementation Guides (STIGs), submit change requests for system components, develop a Plan of Action and Milestones (POA&M), create documentation supporting Risk Management Framework (RMF) accreditations, perform vulnerability management using automated systems, and create and submit RMF packages. You’ll brief the technical security posture to client leadership, prepare brief slides and summaries of vulnerabilities, and advise on how to prevent and mitigate future security threats.

In this role, you’ll closely impact a national security level communications system that provides vital information to strategic and tactical users of the DoD Teleport communications systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.

What You’ll Work On:

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Perform risk and vulnerability assessments in network, system, and application areas and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Participate in the development of test strategies and conduct of testing, validating, and implementing applicable STIG requirements for current or new systems.
• Conduct periodic self-assessments of systems to ensure STIG compliance and create STIG checklists to support periodic self-assessments.
• Perform Information Assurance Vulnerability Management (IAVM) activities such as IA vulnerability alerts, bulletins, and tasking orders and develop a systematic approach for responses to IAVM related issues to maintain system compliance.

You Have:

• 7+ years of experience implementing, testing, and validating STIGs, performing system self‑assessments, and creating STIG checklists
• 7+ years of experience executing IAVM actions, such as IAVA alerts, bulletins, or tasking orders, and developing compliant engineering responses
• 7+ years of experience deploying and validating ESS, ACAS, and CMRS, analyzing ACAS scans, developing remediation strategies, and implementing patches and upgrades
• 7+ years of experience reviewing cybersecurity and engineering change requests to ensure operational availability and compliance
• Knowledge of RMF and its application to networks and IT systems, such as Cisco routers, switches, Active Directory, or access control
• Ability to manage users in Windows or Linux and administer VMs in VMware or Hyper‑V
• Ability to accredit and secure DoD systems using RMF, perform IAVA analysis, document POA&Ms, and prepare security assessment artifacts
• Secret clearance
• HS diploma or GED
• Security+ Certification

Nice If You Have:

• Possession of excellent verbal and written communication skills
• Top Secret Clearance
• Cybersecurity Certification, such as CISSP or Certified Ethical Hacker Certification, or Networking Certification, such as Network+ or Cisco Certification