Information System Security Specialist II - AERMOR LLC

Job Type: Full Time

Location: San Diego, CA 

AERMOR is seeking an Information System Security Specialist II. You will support the protection and security of Navy and Department of Defense (DoD) information systems by implementing cybersecurity policies, managing security risks, and ensuring compliance with the Navy Risk Management Framework (RMF). The SISS2 is responsible for assisting in the development and maintenance of security measures and providing support to ensure systems are protected against evolving cyber threats.

Responsibilities:

• Assist in the management and execution of cybersecurity policies for information systems in accordance with DoD and Navy requirements.
• Support the implementation of security controls, including monitoring and maintenance of security compliance through tools such as eMASS.
• Provide support in the certification and accreditation (C&A) processes, ensuring systems meet required cybersecurity standards.
• Participate in risk assessments to identify potential vulnerabilities and threats to Navy information systems.
• Assist in conducting vulnerability scans using tools like VRAM (Vulnerability Remediation Asset Manager) and contribute to the remediation efforts for identified security issues.
• Ensure proper security configurations are maintained and updated across systems.
• Assist in the continuous monitoring of Navy information systems to maintain compliance with RMF requirements.
• Perform regular system security audits, ensuring that all security controls are in place and functioning effectively.
• Report security incidents and work with senior security personnel to resolve security breaches or weaknesses.

• Minimum of 2 years of experience in information system security or a related cybersecurity field, with experience in the application of DoD cybersecurity frameworks.
• Familiarity with Navy RMF, DoD Information Assurance policies, and tools like eMASS and VRAM for managing and tracking security compliance.
• Strong understanding of NIST SP 800-53 security controls and related security policies applicable to DoD systems.
• Experience with vulnerability scanning, risk management, and continuous monitoring of information systems.
• Bachelor's degree in Information Systems, Computer Science, or a related field, or equivalent experience.
• Must have an IAM Level I certification, such as CAP, CND, Cloud, GSLC or Security CE.

Powered by JazzHR