Job Description

Founded in 1995, ESN is a Small Disadvantaged Business (SDB), Service-Disabled Veteran-Owned Small Business (SDVOSB) and Veteran Owned Small Business (VOSB). ESN delivers trusted solutions that support our nation's defense. For more than two decades, we have been providing our military and government customers with mission-critical services including engineering and technical support, strategic and program management, testing and evaluation, operations support, and information technology. We are committed to proven, repeatable corporate quality management processes and are certified CMMI Maturity Level III - Development/Services & ISO 9001:2015.

Candidates may be located within a 30-mile radius of any NIWC LANT Lab facility (Norfolk, DC area, Charleston, or NOLA).

ESN is seeking a Cybersecurity Engineer II/III to support a contract with Naval Information Warfare Center (NIWC), Atlantic, in Norfolk, VA. The contract to support NIWC LANT consists of Independent Validation & Verification, Operations, Sustainment, and Installation support. The Maintenance Figure of Merit (MFOM) systems provide near real-time material-based readiness reporting to the Defense Readiness Reporting System-Navy (DRRS-N) and provides three additional primary capabilities to the Fleet including Ashore and Afloat systems. This support includes Cybersecurity, automated software testing, Scrum Master support, operating in the AWS Cloud, management of JIRA/Confluence, and project support.

• Planning, implementing, upgrading, and/or monitoring cybersecurity measures to improve cyber defense and maintain a cyber-resilient network.
• Assessing cybersecurity vulnerabilities for risks and proposing and implementing remediation actions or risk mitigation strategies.
• Ensuring appropriate security controls are in place that will safeguard digital files and electronic infrastructure.
• Responding to computer security breaches to re-establish protections and making required reports.
• Schedule is Monday through Friday with some weekend support required.
• Performs other duties and works schedules as assigned by management, which may include changes to duties, responsibilities, or work hours as required to meet contractual obligations, mission requirements, or the needs of the organization

Minimum Requirements:

• Required Education: Master's or Bachelor's degree in Cybersecurity Engineering, Computer Engineering, Electrical Engineering, or Electronics Engineering. Or Master's or Bachelor's degree in Mathematics with a concentration in computer science or equivalent.
• Required certification - Security+ (Preferred certifications include AWS Security Certification Specialty and Certified Information Systems Security Professional.)
• Ten (10) years of experience preparing, implementing, and ensuring compliance with cybersecurity policy, to include Assessment and Authorization requirements.
• Specific Experience - Three (3) years' experience conducting security audits on IT infrastructure and managing appropriate scans and STIG checklists.
• Experience with the DoD Risk Management Framework (RMF), including execution of RMF Steps 1-6, development of security authorization packages (System Security Plan, POA&M, SAR, etc.), and coordination with Authorizing Officials (AO) and Security Control Assessors (SCA).
• Familiarity with Navy use of eMASS for submission and tracking of RMF packages.
• Experience supporting cybersecurity for Navy Ashore and Afloat platforms

Active DoD Secret Clearance Required