KES logo

Information Systems Security Engineer II

KES
  • San Diego, California
    2 days ago

    Job Description

    Koam Engineering Systems, Inc. (KES Inc.) is an employee-owned small business specializing in technology innovation and systems integration by combining innovative products and reliable engineering services. Headquartered in San Diego, California and with offices in Gig Harbor, WA KES provides services globally in systems engineering & technical assistance, requirements analysis, software design & development, systems integration & testing, independent verification & validation, and operational & logistic support.
     
    Position Summary
    We are currently seeking an Information Systems Security Engineer II to support cybersecurity engineering, compliance, vulnerability management, and Risk Management Framework activities across Ballistic Missile Defense C4I software, hardware, and Program of Record systems within a Department of Defense test, integration, and evaluation environment. This position is responsible for implementing and maintaining cybersecurity controls, supporting system authorization activities, and ensuring cybersecurity requirements are integrated into systems, networks, and operational processes.
     
    The role requires a hands-on cybersecurity professional with experience supporting secure DoD environments, vulnerability scanning, STIG implementation, patch validation, security tool administration, and RMF artifact management. The selected candidate will work closely with the Information Systems Security Officer, system administrators, network engineers, and technical teams to identify vulnerabilities, support remediation, maintain compliance documentation, and strengthen the overall cybersecurity posture of the environment.
     
    Experience with ACAS, Nessus, SCAP, eMASS, Trellix, DISA STIGs, Windows, Linux, Hyper-V, and DoD Assessment & Authorization (A&A) processes is highly desired. The selected candidate must be able to assess cybersecurity risk, document technical findings clearly, coordinate remediation activities, and support mission objectives without creating unnecessary impact to system availability or operational readiness.
     
    Responsibilities
    • Support cybersecurity engineering, compliance, vulnerability management, and RMF activities for Ballistic Missile Defense C4I software, hardware, and Program of Record systems.
    • Implement cybersecurity strategies, controls, and corrective actions in coordination with the Information Systems Security Officer, technical teams, and management.
    • Conduct security assessments, vulnerability reviews, and compliance checks to identify cybersecurity risks, system weaknesses, and required remediation actions.
    • Perform DISA STIG assessments for operating systems, applications, databases, network devices, and supporting infrastructure to maintain DoD compliance requirements.
    • Support vulnerability management using ACAS, Nessus, SCAP, and related tools, including scan preparation, scan execution, plugin updates, scan analysis, vulnerability tracking, and remediation coordination.
    • Analyze vulnerability findings, assess operational impact, prioritize corrective actions, and coordinate remediation with system administrators, network engineers, and other technical personnel.
    • Support patch management and security update activities by helping validate applicability, track implementation, confirm remediation, and document results.
    • Use eMASS and related RMF tools to maintain cybersecurity artifacts, document control implementation, track findings, support authorization activities, and provide evidence for compliance reviews.
    • Configure, monitor, and support cybersecurity tools, including Trellix products and other endpoint, vulnerability, or compliance management solutions used within the environment.
    • Support cybersecurity integration across Windows, Linux, Hyper-V, network, and application environments to ensure security controls are implemented without unnecessarily affecting system performance or mission operations.
    • Coordinate with cybersecurity, systems administration, network engineering, software, test, and leadership personnel to support compliance requirements, technical remediation, system readiness, and operational continuity.
    • Prepare and communicate cybersecurity status, risks, findings, remediation progress, and recommended actions to the ISSO, management, technical teams, and customers as required.
    • Produce and maintain cybersecurity documentation, including scan results, STIG checklists, vulnerability reports, mitigation statements, RMF artifacts, POA&M inputs, implementation evidence, and compliance records.
     
    Required Knowledge, Skills, & Abilities
    Education/Licensure/Credentials
    Required:
     
    • Bachelor’s degree in related fields such as computer science, computer engineering, information systems, network engineering, systems engineering, software engineering or a closely related discipline
    OR
    • Equivalent specialized knowledge customarily acquired through a combination of military training, formal technical instruction, certifications, and substantial progressively responsible practical experience performing work of comparable scope, complexity, and independent judgment
    • Security+ (DoD IAT Level II) or ability to meet requirements within three months of employment
    • This position requires an existing U.S. Government DoD granted security clearance/eligibility at the final Secret level. Individuals must be able to maintain the necessary security clearance/eligibility for continued employment.
    • U.S. Citizenship is required.
     
    Preferred:
    • CompTIA Linux+ certification
    • CompTIA Network+ certification
    • Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar advanced security certifications
     
    Experience
    Required:
    • Minimum 5 years of progressively responsible experience supporting cybersecurity, information assurance, vulnerability management, RMF, systems administration, network administration, or secure technical operations within a DoD, enterprise, lab, test, or other complex technical environment.
    • Experience supporting cybersecurity compliance requirements within operational, laboratory, development, test, or integration environments, including STIGs, vulnerability remediation, RMF, ATO support, patching, scan response, or compliance documentation.
    • Experience using or supporting vulnerability and compliance tools such as ACAS, Nessus, SCAP, eMASS, Trellix, or similar cybersecurity tools.
    • Experience conducting STIG assessments, reviewing scan results, documenting findings, developing remediation actions, and supporting POA&M or authorization activities.
    • Experience coordinating cybersecurity remediation with system administrators, network engineers, software teams, test teams, or other technical personnel.
    • Experience supporting Windows, Linux, Hyper-V, network infrastructure, or application environments from a cybersecurity or compliance perspective.
    • Experience producing or maintaining cybersecurity documentation, including vulnerability reports, STIG checklists, scan results, RMF artifacts, mitigation statements, implementation evidence, or compliance records.
    • Ability to assess cybersecurity findings, identify operational impact, prioritize remediation actions, and communicate risks and recommendations clearly to technical and non-technical stakeholders.
    • Ability to work in a team-oriented, collaborative environment while maintaining sound judgment, documentation discipline, and attention to detail.
     
    Preferred:
    • Experience supporting Ballistic Missile Defense, C4I, C5ISR, Navy Program of Record, DoD lab, test, integration, or fleet environments.
    • Experience with PowerShell, SQL, Hyper-V, Windows Server, Red Hat Enterprise Linux, and network management or monitoring tools such as Nagios, Wireshark, SolarWinds, or similar technologies.
    • Experience supporting classified and unclassified enclaves in Navy, NIWC Pacific, Missile Defense Agency, or other DoD environments.
    • Experience supporting continuous monitoring, vulnerability remediation, POA&M management, ATO sustainment, or cybersecurity readiness activities.
    • Experience working with system administrators, network engineers, software developers, test teams, and government customers to resolve cybersecurity findings without unnecessarily impacting mission operations.
     
    Since 1995, KES continues to foster the entrepreneurial spirit of a growing small business that focuses on the needs of its customers and employees and serves to provide a rewarding and challenging career.  KES offers a competitive salary and full range of benefits. KES, Inc. is an EEO/AA Employer committed to hiring and retaining a diverse workforce.

    Numbers & Facts

    LocationSan Diego, California
    IndustryAerospace and Defense
    Company Size100 to 499 employees
    Year Founded1994
    Websitehttp://www.kes.com/

    About Company

    It has been nearly 21 years since our company, Koam Engineering Systems Inc., (otherwise known as KES Incorporated, or simply KES) began providing innovative systems engineering solutions to our valued customers in the defense community. From its inception, KES was meant to be a company that provided both efficient and effective service - as well as one that genuinely cared about the success and well-being of both its customers and its employees. Looking back on the last 21 years, I would say that we have lived up to this inspired vision and that we have much for which to be proud.

    When KES was founded in 1994 we had but one thing in mind, that our company would do better, that it would strive to provide the best possible service to our customers, and that it would also provide a positive and supportive working environment - one in which our employees would be both happy and productive. I sincerely believe we have achieved this ‘win-win’ scenario...and that we will continue doing so in the future.

    Skills

    • Analysis Skillsunmatched
    • CISM - Certified Information Security Managerunmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • CompTIA Linux+unmatched
    • CompTIA Network+unmatched
    • CompTIA Security+unmatched
    • Computer Engineeringunmatched
    • Computer Scienceunmatched
    • Computer Securityunmatched
    • Corrective Actionunmatched
    • Defense Information Systems Agency (DISA)unmatched
    • Detail Orientedunmatched
    • Document Controlunmatched
    • Documentationunmatched
    • Establish Prioritiesunmatched
    • Governmentunmatched
    • Information Systems Security Engineering (ISSE)unmatched
    • Information Technology & Information Systemsunmatched
    • Information/Data Security (InfoSec)unmatched
    • Integration Testingunmatched
    • Internet Securityunmatched
    • Laboratory Operationsunmatched
    • Laboratory Testingunmatched
    • Leadershipunmatched
    • Linux Operating Systemunmatched
    • Maintain Complianceunmatched
    • Microsoft Hyper-Vunmatched
    • Microsoft Windows Operating Systemunmatched
    • Microsoft Windows Serverunmatched
    • Militaryunmatched
    • Nagios Monitoring Toolunmatched
    • Nessusunmatched
    • Network Administration/Managementunmatched
    • Network Architecture/Engineeringunmatched
    • Network Monitoringunmatched
    • Network Softwareunmatched
    • Operating Systemsunmatched
    • Operational Auditunmatched
    • Operational Supportunmatched
    • Operations Processesunmatched
    • Operations Security (OPSEC)unmatched
    • Performance Managementunmatched
    • Product Engineeringunmatched
    • Red Hat Linux Operating Systemunmatched
    • Regulatory Complianceunmatched
    • Requirements Managementunmatched
    • Risk Analysisunmatched
    • Risk Management Framework (RMF)unmatched
    • SQL (Structured Query Language)unmatched
    • Security Analysisunmatched
    • Security Clearanceunmatched
    • Security Patchesunmatched
    • Small Businessunmatched
    • Software Designunmatched
    • Software Developmentunmatched
    • Software Engineeringunmatched
    • Software Patchesunmatched
    • Software Testingunmatched
    • System Integration (SI)unmatched
    • System Operationsunmatched
    • Systems Administration/Managementunmatched
    • Systems Analysisunmatched
    • Systems Engineeringunmatched
    • Team Playerunmatched
    • Technical Leadershipunmatched
    • Technical Operationsunmatched
    • Technical Supportunmatched
    • Technical Writingunmatched
    • Test Plan/Scheduleunmatched
    • United States Citizenunmatched
    • United States Department of Defense (DoD)unmatched
    • Validation Testingunmatched
    • Vehicle Fleetsunmatched
    • Vulnerability Scannersunmatched
    • Web Client Plug-insunmatched
    • Windows PowerShellunmatched
    • Wireshark (Ethereal)unmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder