Open Bloomington Cybersecurity jobs

Summary

DevSecOps engineer supporting NSWC Crane, selecting, deploying and maintaining the CI/CD toolchain for Navy development teams and building automated application security testing and security controls into the pipeline. Also handles cloud integration, patch compliance, configuration management, security posture reporting and some database support. Requires an active or interim Secret clearance, DoD Cyber Workforce (CSWF) qualification and completion of DAU DevSecOps training after hire.

Summary

On-site identity and infrastructure role at Crane, Indiana that administers enterprise Active Directory, Group Policy, DNS, DHCP and Windows PKI certificate lifecycle while setting authentication and access-control policy across hybrid on-premises and Entra ID environments. The holder also serves as senior infrastructure administrator and supervisory team lead for the group responsible for enterprise server management and security compliance. Requires an active Secret clearance on hire and DoD IAT Level III certification such as CISSP or CASP+; CyberArk and SailPoint experience is highly desired.

Summary

Security management and accreditation lead for classified information systems at a defense contractor, running the risk management framework under DCSA, DAAG or JSIG processes and owning the body of evidence including risk assessments, system security plans and plans of action and milestones. The role maintains continuous monitoring and patching, coordinates vulnerability management, security assessments, penetration testing and remediation, oversees media sanitization and destruction, verifies user clearances and need-to-know, and sits as a voting member of the change control board. It also backs unclassified security operations and the IT team and coordinates ISSOs and system administrators; the position is on-site and is neither hybrid nor remote eligible.

Summary

A classified-information security role supporting the NSWC customer in Crane, applying classification, marking, redaction, handling and safeguarding requirements for protected and classified material and implementing original and derivative classification standards. The duties are programme security administration: classified mail and meeting access control, courier and portable-electronic-device authorisations, SF-700 security container records, validation of hardware requests against the NSA approved product list, and compliance audits, inspections and spot-checks. The role requires in-person support, US citizenship, and the ability to obtain and maintain a Secret clearance.

Summary

Information Systems Security Officer for classified systems at Kratos's Crane, Indiana site, implementing RMF following DCSA, DAAG or JSIG processes and supporting ATO from categorization through continuous monitoring. Maintains SSPs, risk assessments and POA&Ms in eMASS, reviews audit logs, escalates incidents and sits on the change control board, while also assisting with unclassified security operations and IT services. Fully on-site and requires an active security clearance.

Summary

Communications systems support specialist on a Department of War TACP program, installing hardware, software and upgrades on radios and other communication devices, troubleshooting them, and maintaining local system design documentation. Also monitors hardware and software configurations against security and performance standards, provides IT support, and trains warfighters and staff on the systems. Requires US citizenship, the ability to obtain and maintain a security clearance, and 5-10 years of related experience.

Summary

An information systems security engineering role providing cybersecurity engineering for tactical DoD and Navy information systems, networks, and platform systems. The position centers on the Risk Management Framework process, developing and maintaining security artifacts such as the System Security Plan, Risk Assessment Report, and POA&Ms, assessing vulnerabilities, and sustaining systems through authorization and continuous monitoring. This role requires in-person support at a Navy site in Crane, Indiana.

Summary

On-site Information Systems Security Engineer at Crane leading RMF package development in eMASS, security control assessments, POA&Ms and continuous monitoring for DoD systems. Runs ACAS (Nessus) and SCAP vulnerability scans, applies DISA STIGs, bridges the development team and the ISSM, and supports secure configurations, boundary defenses and incident response. Requires 5+ years of cybersecurity, systems or network experience, CompTIA Security+, US citizenship, and an active Secret clearance or interim Secret before starting.

Summary

Hands-on information assurance work on defense systems, applying the Risk Management Framework end to end: preparing SSPs, SAPs, SARs and POA and M documentation and driving the certification activities behind an Interim Authority to Test and an Authority to Operate. The engineer also conducts threat modelling, vulnerability assessment and security log analysis, hardens application interfaces, data repositories and cloud environments, and designs network, database and enterprise protections around Zero Trust principles, boundary protection, firewalls and cryptographic controls. The bar is high and fixed: 10 or more years of systems engineering, information assurance or cybersecurity experience, a CISSP or SecurityX certification, US citizenship, an active Secret clearance or an interim one before start, and a fully onsite seat.