Information Systems Security Engineer

Overview

Continental Electronics Corporation is a leading provider of RF technologies and innovative solutions with 80 years of proven performance. CEC has experienced significant recent growth and has established itself as the go-to supplier for a diversified product line supporting a wide spectrum of markets from commercial products, military customers, to space research laboratories.

The Information System Security Engineer supports the reliable, secure, and compliant operation of classified information systems, networks, and supporting infrastructure. This position performs day to day administration of servers, virtualized environments, operating systems, network services, user services, storage, backups, cybersecurity, and network-connected systems in support of organizational and customer mission requirements.

The Information System Security Engineer works closely with Information System Security Officers (ISSOs), Information System Security Manager, program personnel, and other stakeholders. The Information System Security Engineer will maintain system availability, implement approved changes, remediate technical issues, and sustain the security posture of the environment.

This is a hands-on, mid-level technical position. The successful candidate will have practical experience administering Windows and/or Linux servers, virtual machines, network services, user accounts and access controls, patching, backups, system monitoring, and technical documentation in a DoD, federal, defense-contractor, regulated, or similar security-conscious environment.

Responsibilities

Contribute to the implementation and maintenance of cybersecurity programs for classified systems

Configure, maintain, troubleshoot, and document systems prior to and after they receive an Authorization to Operate (ATO)

Contribute greatly to success of compliance activities associated with NIST SP 800-171, NIST SP 800-53, RMF, applicable STIGs and DCSA and Customer requirements

Monitor security tools, system logs, audit records, and vulnerability scan results

Monitor and respond to cybersecurity threats and analysis by reviewing alerts, indicators of compromise, system activity, and security events for potential risks

Assist with vulnerability management activities, including scan coordination, risk validation, remediation tracking, and verification of corrective actions

Assist with developing, updating, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and other cybersecurity documentation

Devise new Plans of Actions and Milestones when necessary

Support system accreditation and authorization activities, including preparation of ATO packages and supporting artifacts

Participate in security assessments, self-inspections, customer audits, and government reviews.

Track remediation activities for identified vulnerabilities and security findings

Coordinate with Information System Security Managers (ISSMs), Facility Security Officers (FSOs), network administrators, and program teams to ensure compliance requirements are met

Assist with incident response activities, investigations, and reporting requirements

Maintain cybersecurity records and evidence required for audits and assessments

Perform day to day security administration and continuous monitoring activities

Support user account reviews, access control validation, and privileged account management activities

Promote cybersecurity hygiene across systems and users, including secure configuration, least privilege, strong authentication, patch awareness, and protection of sensitive data

Ensure proper handling, storage, transmission, and destruction of classified and Controlled Unclassified Information (CUI)

Participate in security awareness and user training initiatives

Stay informed of emerging threats, vulnerabilities, and changes to regulatory requirements

Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork

Demonstrate behavior consistent with the company’s Code of Ethics and Conduct

It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem

Duties may be modified or assigned at any time to meet the needs of the business

Qualifications

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; or equivalent combination of education and relevant experience

5 years of related experience

Equivalent military or industry experience may be substituted

Demonstrated experience in information security, cybersecurity, information assurance, system administration, or related technical fields

Candidates must possess at minimum a Secret security clearance issued by the U.S. Government prior to selection. Active DoD-issued clearances are preferred, although not required. Selected candidate must also be able to maintain the required clearance throughout the course of their employment

This job requires the applicant to be a " U.S. Person” (or otherwise authorized by the U.S. Government) to access export controlled information. A U.S. Person is a lawful permanent resident as defined in 8 U.S.C. 1101(a)(20) or who is a protected individual as defined by 8 U.S.C. 1324b(a)(3). U.S. citizens, U.S. nationals, U.S. permanent residents, or individuals granted refugee or asylee status in the U.S. are considered U.S. persons.

Certifications (Preferred)

· Security+

· SSCP

· CAP

· CySA+

· Network+

· Certified Information Systems Security Professional (CISSP) Associate

· Microsoft Security Certifications

· CompTIA or DoD 8140-aligned certifications

Physical Demands

While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee must frequently lift or move objects up to 10 pounds and occasionally lift or move objects up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision and ability to adjust focus.

Please review our benefits here: Life at OSI

Pay may range from $116,000 to $122,000 annually

The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.

Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.

NOTICE TO THIRD PARTY AGENCIES

OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.

Equal Opportunity Employer - Disability and Veteran

Know Your Rights

Poster Link:

https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.

Contribute to the implementation and maintenance of cybersecurity programs for classified systems

Configure, maintain, troubleshoot, and document systems prior to and after they receive an Authorization to Operate (ATO)

Contribute greatly to success of compliance activities associated with NIST SP 800-171, NIST SP 800-53, RMF, applicable STIGs and DCSA and Customer requirements

Monitor security tools, system logs, audit records, and vulnerability scan results

Monitor and respond to cybersecurity threats and analysis by reviewing alerts, indicators of compromise, system activity, and security events for potential risks

Assist with vulnerability management activities, including scan coordination, risk validation, remediation tracking, and verification of corrective actions

Assist with developing, updating, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and other cybersecurity documentation

Devise new Plans of Actions and Milestones when necessary

Support system accreditation and authorization activities, including preparation of ATO packages and supporting artifacts

Participate in security assessments, self-inspections, customer audits, and government reviews.

Track remediation activities for identified vulnerabilities and security findings

Coordinate with Information System Security Managers (ISSMs), Facility Security Officers (FSOs), network administrators, and program teams to ensure compliance requirements are met

Assist with incident response activities, investigations, and reporting requirements

Maintain cybersecurity records and evidence required for audits and assessments

Perform day to day security administration and continuous monitoring activities

Support user account reviews, access control validation, and privileged account management activities

Promote cybersecurity hygiene across systems and users, including secure configuration, least privilege, strong authentication, patch awareness, and protection of sensitive data

Ensure proper handling, storage, transmission, and destruction of classified and Controlled Unclassified Information (CUI)

Participate in security awareness and user training initiatives

Stay informed of emerging threats, vulnerabilities, and changes to regulatory requirements

Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork

Demonstrate behavior consistent with the company’s Code of Ethics and Conduct

It is the responsibility of every employee to report to their manager or a member of senior management any quality problems or defects in order for corrective action to be implemented and to avoid recurrence of the problem

Duties may be modified or assigned at any time to meet the needs of the business

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Information Technology, or related field; or equivalent combination of education and relevant experience

5 years of related experience

Equivalent military or industry experience may be substituted

Demonstrated experience in information security, cybersecurity, information assurance, system administration, or related technical fields

Candidates must possess at minimum a Secret security clearance issued by the U.S. Government prior to selection. Active DoD-issued clearances are preferred, although not required. Selected candidate must also be able to maintain the required clearance throughout the course of their employment

This job requires the applicant to be a " U.S. Person” (or otherwise authorized by the U.S. Government) to access export controlled information. A U.S. Person is a lawful permanent resident as defined in 8 U.S.C. 1101(a)(20) or who is a protected individual as defined by 8 U.S.C. 1324b(a)(3). U.S. citizens, U.S. nationals, U.S. permanent residents, or individuals granted refugee or asylee status in the U.S. are considered U.S. persons.

Certifications (Preferred)

· Security+

· SSCP

· CAP

· CySA+

· Network+

· Certified Information Systems Security Professional (CISSP) Associate

· Microsoft Security Certifications

· CompTIA or DoD 8140-aligned certifications

Physical Demands

While performing the duties of this job, the employee is regularly required to sit. The employee frequently is required to walk; use hands to finger, handle or feel; reach with hands and arms; and talk or hear. The employee is occasionally required to stand. The employee must frequently lift or move objects up to 10 pounds and occasionally lift or move objects up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, color vision and ability to adjust focus.

Please review our benefits here: Life at OSI

Pay may range from $116,000 to $122,000 annually

The pay range above represents annual base salary only. Final compensation will be determined based on factors such as your job level, geographic location, date of hire, experience, job-related knowledge and skills, and education in conjunction with market and business considerations.

Base salary is one component of your total rewards package. You may be eligible for long-term incentives, potential discretionary bonuses, and the ability to purchase company stock at a discounted rate through the Employee Stock Purchase Program (ESPP). OSI also offers comprehensive benefits including various options for health plans, access to 401(k) retirement plan, health savings account, disability insurance, life insurance, AD&D insurance, leave of absence programs and an array of voluntary benefits. In addition, paid time off is offered to be used for vacation, holidays, bereavement, and jury duty. Full-Time salaried employees are entitled to flexible time-off.

NOTICE TO THIRD PARTY AGENCIES

OSI Systems, Inc. and its subsidiaries (collectively “OSI”) does not accept unsolicited resumes from recruiters or employment agencies. If any person or entity, including a recruiter or agency, submits any information, including any resume or information regarding any potential candidate, without a signed agreement in place with OSI, OSI explicitly reserves the right to use such information, and pursue and/or hire such candidates, without any financial obligation to the person, recruiter or agency. Any unsolicited information or resumes, including those submitted directly to hiring managers, are considered and deemed to be the property of OSI.

Equal Opportunity Employer - Disability and Veteran

Know Your Rights

Poster Link:

https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12ScreenRdr.pdf

OSI Systems, Inc. has three operating divisions: (a) Security, providing security and inspection systems, turnkey security screening solutions and related services; (b) Healthcare, providing patient monitoring, diagnostic cardiology and anesthesia systems; and (c) Optoelectronics and Manufacturing, providing specialized electronic components and electronic manufacturing services for original equipment manufacturers with applications in the defense, aerospace, medical and industrial markets, among others.