At a Glance
- Tasks: Support security assessments and manage cybersecurity testing and reporting.
- Company: Join a leading defence organisation focused on cybersecurity.
- Benefits: Competitive salary, security clearance support, and career advancement opportunities.
- Other info: Position contingent upon funding; dynamic team environment.
- Why this job: Make a difference in national security while developing your cybersecurity skills.
- Qualifications: 5+ years of cybersecurity experience and relevant certifications required.
The predicted salary is between 50000 - 70000 € per year.
Responsibilities include supporting the information system owner to complete security assessments, achieve system authorizations, continuous monitoring, and configuration management through eMASS. Performing cybersecurity testing, analysis, and reporting by conducting ACAS scans, STIG checks, port scanning, application code review, RMF control review, and POAM. Providing in-depth analysis on cybersecurity test results, remediation steps, and potential mitigating factors. Assessing NSWC systems in accordance with Navy, NIST, DoD, and DISA guidance. Reporting security incidents in accordance with the Command's Incident Response Plan. Verifying configuration management and tracking security update implementation to systems using existing automated tools. Adhering to pre-defined configuration management and change management policies and procedures for authorizing software prior to its implementation on systems, ensuring systems are operated, used, maintained, and disposed of in accordance with all applicable security policies and practices. Supporting the Information System Security Manager (ISSM) and Cybersecurity Lead in meeting all RMF documentation, process, policy, risk assessment, testing, and continuous monitoring requirements per the NIST SP-800 series. Verifying patches and virus definitions are updated on the system using existing automated tools. Providing RMF support for all future and/or new Assessment and Authorization (A-A) and collaborating with IPT Lead, PM, Developers, Engineers, and Test teams through guidance and options on how to meet all technical and policy security controls. Maintaining security reporting compliance requirements outlined in the System SLCM Strategy.
Additional Information: Filling this position is contingent upon funding.
Requirements:
- Must possess an active Secret clearance at the minimum.
- A minimum of five years of cybersecurity experience.
- Must currently hold a DoD 8570-compliant IAT II certification (SSCP or Security+ CE with appropriate CE/OS certificate), and IAM II certification (CAP or CASP CE) or be able to obtain within six months.
- CE/OS certificate may include Windows or Linux.
- Be knowledgeable and experienced with Windows.
Cyber Security Engineer II employer: Scientific Research Corporation
As a Cyber Security Engineer II, you will thrive in a dynamic work environment that prioritises innovation and professional growth. Our company offers competitive benefits, a collaborative culture, and opportunities for continuous learning, ensuring that you are well-equipped to tackle the challenges of cybersecurity while making a meaningful impact on national security. Located in a vibrant area, we provide a supportive atmosphere where your contributions are valued and recognised.
Contact Detail:
Scientific Research Corporation Recruiting Team
StudySmarter Expert Advice🤫
We think this is how you could land Cyber Security Engineer II
✨Tip Number 1
Network, network, network! Get out there and connect with professionals in the cybersecurity field. Attend industry events, join online forums, and don’t be shy about reaching out on LinkedIn. We all know that sometimes it’s not just what you know, but who you know!
✨Tip Number 2
Prepare for interviews like a pro! Research the company and its cybersecurity practices, and be ready to discuss how your experience aligns with their needs. We recommend practising common interview questions and even doing mock interviews with friends or mentors to boost your confidence.
✨Tip Number 3
Showcase your skills through practical demonstrations. If you’ve worked on relevant projects or have certifications, bring them up during interviews. We love seeing candidates who can back up their claims with real-world examples, so don’t hold back!
✨Tip Number 4
Apply directly through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we often have exclusive roles listed there, so keep an eye out for opportunities that match your skills and interests.
We think you need these skills to ace Cyber Security Engineer II
Some tips for your application 🫡
Tailor Your CV:Make sure your CV highlights your relevant experience in cybersecurity, especially with tools like eMASS and ACAS. We want to see how your skills align with the responsibilities listed in the job description.
Showcase Your Certifications:Don’t forget to mention your DoD 8570-compliant certifications! If you’re working towards them, let us know. This shows your commitment to staying current in the field.
Be Clear and Concise:When writing your application, keep it straightforward. Use bullet points for your achievements and responsibilities to make it easy for us to read and understand your qualifications.
Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role!
How to prepare for a job interview at Scientific Research Corporation
✨Know Your Cybersecurity Basics
Make sure you brush up on your cybersecurity fundamentals, especially around NIST, DoD, and DISA guidelines. Be ready to discuss how you've applied these in past roles, particularly in relation to security assessments and incident response.
✨Familiarise Yourself with eMASS
Since the role involves using eMASS for security assessments and authorisations, it’s crucial to understand how this tool works. If you’ve used it before, prepare to share specific examples of how you’ve leveraged it to achieve compliance or streamline processes.
✨Prepare for Technical Questions
Expect technical questions related to ACAS scans, STIG checks, and configuration management. Practise explaining your approach to conducting these tests and how you interpret the results. Being able to articulate your thought process will impress the interviewers.
✨Show Your Team Spirit
Collaboration is key in this role, so be prepared to discuss how you’ve worked with cross-functional teams in the past. Highlight any experiences where you supported developers or engineers in meeting security controls, as this will demonstrate your ability to work well within a team.