About LSI
LSI is an employee-owned company that employs dynamic teams of professionals – people with the finest technical expertise, a level of passionate creativity, and a truly visionary outlook who deliver innovative training solutions that exceed our customers’ expectations. Everyone at LSI has a personal stake in our success. LSI has over 400 training support experts, engineers, and craftsmen on staff who develop state-of-the-art high-fidelity training devices, complex computer-based, highly interactive distributed learning products, and comprehensive, dynamic technical publications. LSI employee-owners collaborate to deliver training products and services for a myriad of programs and customers, using leading-edge technology and proven processes.
Mission
Our mission is to prepare our military and allies to be battle-ready through cutting-edge training products and services.
Vision
Our vision is to be the premier provider of military training solutions, renowned for our innovation and excellence. Through employee-ownership and teamwork, we will shape a future where every military service member is equipped to succeed in their mission.
Guiding Principles
ESOP Sustainability: We do everything within our control to meet project budgets and schedules, so our ESOP prospers.
Take Ownership: Each Employee-Owner takes ownership at the individual level for their words, actions, and results. Individual ownership breeds accountability. Accountability breeds trust. When we hold ourselves accountable and trust our fellow employee-owners to do the same, we realize success.
Clear Communication: We project confidence in our communication by using unambiguous language and providing clear purpose and direction.
Pursuit of Excellence: We aggressively pursue continuous improvement both as teams and individual employee-owners. We strive to get better every day. There is no room for mediocrity.
Pride in Our Work: We know the value of our work and are proud of what we produce.
Customer Focus: Customers are both internal and external, and we strive to give both our best efforts.
Assume Positive Intent: Assume others are well-intentioned in their actions and seek additional information about the circumstances to help solve problems. Assuming positive intent in all interactions is the key to building strong teams and working together to solve problems.
One Voice: Every Employee-Owner is expected to speak up if they have an idea for improvement or if they disagree with a potential course of action. Once a decision is made, the entire team commits to it and moves forward with one voice.
Apply: https://www.lsijax.com/careers/
General Summary
The Cybersecurity Engineer III will perform advanced system analysis, design, and implementation regarding cybersecurity as it applies to a variety of information systems, ranging from stand-alone workstations to fully integrated networked training devices, in accordance with Department of Defense (DoD) regulations and guidance.
Essential Job Functions
- Plans, conducts, and supports accreditation efforts for prototypes and fielded information systems, including training devices.
- Patches and provisions hardened Operating Systems (OS) for fielded and prototype information systems. Ensures that improving system security does not adversely impact functionality and be able to provide technical demonstrations.
- Assists software engineers, field technicians and other teammates in complex troubleshooting. Trains and mentors entry-level and intermediate-level cybersecurity engineers.
- Conducts comprehensive security control assessments and produce supporting artifacts such as security test plans and risk assessment reports, architecture analysis reports and other formal technical reports as needed.
- Creates, modifies, and maintains documentation related to the security posture of specialized information systems, including policies and systems architecture.
- Organizes, develops, and briefs technical interchange meetings such as In-Progress Review (IPR) events, recording minutes and specifying Action Items for follow-on tasking.
- Works with the engineering team and management to assure timeline and scope requirements are met.
- Leads RMF and cybersecurity engineering projects with the authority to assign tasking to other engineers.
- Performs installations and security assessments at customer sites, including cleared sites, as well as early testing on pre-release products.
- Contributes labor estimates and expertise to technical proposals, Basis of Estimates (BOEs) and Work Breakdown Structures (WBS) in conjunction with Business Development team, assuring they are technically accurate and professionally presented.
- Must be capable of safely handling government-furnished equipment and materials.
- Must be available to work a standard weekly schedule with overtime as required.
- Perform other duties as assigned.
Knowledge, Skills, and Abilities
- Experience with applying DoD Instruction 8510.01 Risk Management Framework (RMF) for DoD Systems, effective July 19, 2022 (or subsequent issuances) to Information Systems {IS}. Familiarity with comparable guidance for Foreign Military Service (FMS) entities and equivalent Computer Security industry standards.
- Proactively researches and maintains familiarity with all applicable regulatory guidelines regarding cybersecurity for DoD Information Technology (IT) as published by the National Institute of Standards and Technology
(NIST), DoD itself, or by other relevant defense entities.
- Must be experienced in acquisition and sustainment procedures for DoD IT as it pertains to contractors, as defined in issuances such as DFARS 252.204-7012, NIST SP 800- 171, NIST 800-53, Cybersecurity Maturity Model Certification (CMMC) and other regulatory publications.
- Must possess expertise installing and configuring security settings for Microsoft Windows 10 & 11, Red Hat Enterprise Linux 7, 8, 9 (or similar Unix equivalent), newer OS implementations, and legacy and embedded OS implementations.
- Must demonstrate advanced OS configuration management techniques including scripting, deployment, and disk imaging/cloning.
- Must possess expertise with computer security software, including whitelisting, anti-virus, file integrity validation, static analysis security testing, and vulnerability assessment & reporting tools.
- Must exhibit expertise with deploying complex security solutions to a variety of environments, including networked, virtual, and stand-alone information systems.
- Must have excellent reading, writing, presentation and general communication skills.
- Must be able to obtain a security clearance when required by the contract.
Demo