Open Bloomington Cybersecurity jobs

Summary

Information systems security management seat on a defense contract supporting the NSWC Crane Model-Based Engineering Assessment Division, executing assigned Technical Instructions under government technical direction in support of RDT&E, mission engineering, modeling and simulation, and Fleet-support tasking, and working to team quality, configuration-management and security requirements. Qualification bar is five or more years of master-level specialized experience in Specialty Area 72, Information Systems Security Management, a graduate degree or one of several named government or military credentials such as CNSSI 4012 or an NDU CISO or CIO certificate, and one of GSLC, CISSP, CISM, CAP or CASP. An active DoD SECRET clearance or interim is required and must be maintained with eligibility for TS, the work location is NSWC Crane or a contractor facility, and cybersecurity workforce members must log at least 40 continuing education hours a year.

Summary

Information system security seat on a defense contract supporting the NSWC Crane Model-Based Engineering Assessment Division, executing assigned Technical Instructions under government technical direction in support of RDT&E, mission engineering, modeling and simulation, and Fleet-support tasking. The work is assessment-and-authorization oriented: required experience is more than five years in cybersecurity, engineering, test and evaluation or A&A, formerly C&A, including hands-on use of Information Assurance tooling such as DISA eMASS and ACAS, with more than seven years required in place of a college degree, and the holder may be required to hold a Full Security Control Assessor qualification. An active DoD SECRET clearance or interim is required and must be maintained, TS/SCI eligibility is preferred, and the work location is NSWC Crane or a contractor facility.

Summary

Expert-level security architecture and systems security engineering for complex, mission-critical defense networks and information systems, explicitly aligned to the DoD 8570/8140 IASAE Level III category. The work is designing and evaluating end-to-end secure architectures across enterprise networks, applications, databases, cloud environments and infrastructure - incorporating Zero Trust, defense-in-depth, boundary protection, segmentation, identity management and cryptographic protections - leading threat modeling, attack-surface analysis, risk assessments and security architecture reviews, and developing and maintaining Risk Management Framework documentation through Interim Authority to Test and Authority to Operate. This is a subject-matter-expert seat: the holder is the primary technical security advisor to government stakeholders, program managers, engineers and cybersecurity leadership, leads design reviews and technical exchanges, and is expected to exercise significant independent judgment and technical leadership rather than execute assigned tasks.

Summary

Provides mid-level cybersecurity and systems security engineering for Department of Defense systems across development, integration, testing, deployment and sustainment. The work centers on the Risk Management Framework: developing and submitting authorization packages in eMASS, maintaining System Security Plans, Security Assessment Reports and POA&Ms, assessing security controls, running ACAS/Nessus and SCAP vulnerability and STIG compliance scans, and driving remediation across operating systems, applications, databases, network infrastructure and containers. The engineer serves as a technical liaison between software development, systems engineering, network administration and the ISSM rather than building application software. Requires 5 to 9 years of experience, a DoD 8570/8140 IASAE Level II certification, CompTIA Security+ presented before the start date, US citizenship and the ability to obtain and maintain a security clearance.

Summary

Day-to-day security operations and support of classified information systems at a defense site, serving as Information Systems Security Officer reporting to the Information Security Operations Manager and ISSM. Work covers implementing the risk management framework under DCSA, DAAG or JSIG, supporting systems through ATO from initial categorization to continuous monitoring, producing and maintaining the body of evidence including system security plans, risk assessments and POA and M documentation, audit log analysis and incident escalation, patching, change control board membership and eMASS record keeping, plus assisting the information security and IT teams on unclassified corporate networks. An active existing clearance is required, the position is fully on site at Crane and is neither hybrid nor remote, and it carries no supervisory responsibility.

Summary

Hands-on sustainment of radios and other communication devices for a service-disabled veteran-owned defense services contractor supporting the TACP program: installing hardware, software and system upgrades, troubleshooting device and system faults, maintaining local system design documentation, and monitoring hardware and software configurations against security and performance standards. A substantial share of the work is direct user support and classroom-style instruction, training warfighters and staff on operating and maintaining the communication systems and their applications. Requires US citizenship, 5 to 10 years of professional experience, an AS or BS with 3 to 5 years in electrical, electronic or computer engineering, communications, computer science or information systems (or equivalent military experience), and the ability to obtain and maintain a security clearance.

Summary

An information systems security engineering role providing cybersecurity engineering for tactical DoD and Navy information systems, networks, and platform systems. The position centers on the Risk Management Framework process, developing and maintaining security artifacts such as the System Security Plan, Risk Assessment Report, and POA&Ms, assessing vulnerabilities, and sustaining systems through authorization and continuous monitoring. This role requires in-person support at a Navy site in Crane, Indiana.