Sr. Systems Security Engineer

The Sr. Systems Security Engineer at American Operations Corporation is a vital role focused on protecting and securing the organization's IT infrastructure. This position requires a deep understanding of cybersecurity principles, risk management, and experience with advanced security technologies. The ideal candidate will be responsible for designing, implementing, and managing security measures to safeguard system integrity, confidentiality, and availability.

Key Responsibilities:

• Security Architecture: Design and implement secure system architectures and security best practices across the infrastructure.
• Threat Identification: Conduct threat and vulnerability assessments, identifying potential risks within systems and networks and recommending mitigation strategies.
• Incident Response: Lead incident response efforts, including the investigation, documentation, and reporting of security breaches or vulnerabilities.
• Security Policies: Develop and maintain security policies, procedures, and standards to ensure compliance with relevant regulations and frameworks.
• Monitoring & Reporting: Utilize security monitoring tools to analyze system logs, detect anomalies, and provide actionable insights to improve overall security posture.
• Management of Security Tools: Configure and manage security tools such as firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
• Training & Awareness: Conduct training sessions and awareness programs for employees regarding security best practices and protocols.
• Collaboration: Work closely with IT teams, application developers, and third-party vendors to ensure security is integrated into all aspects of system design and implementation.
• Regulatory Compliance: Ensure that systems comply with relevant industry standards and regulations such as NIST, ISO, and GDPR.

• Six (6) years of professional experience in relation to IT security with the DoD or Navy.
• Experience with vulnerability analysis, risk analysis, SCAP scans, DISA Security Technical Implementation Guide (STIG) implementation, scanning for viruses and other software that is detrimental.
• Qualified experience in accreditation of systems and audits.
• Conducts and leads TEMPEST testing using approved test plan, the production test procedures and the current National TEMPEST Standard.
• Must hold one of the following certificates:

CASP, CISSP, CCNP, CISA, GCED, GCIH, or CCSP

• Must be a US citizen.
• Active top secret security clearance.

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability