Cybersecurity Engineer II
Jacksonville, FL 32221
Job Description: About LSI LSI is an employee-owned company that employs dynamic teams of professionals – people with the finest technical expertise, a level of passionate creativity, and a truly visionary outlook who deliver innovative training solutions that exceed our customers’ expectations. Everyone at LSI has a personal stake in our success. LSI has over 300 training support experts, engineers, and craftsmen on staff who develop state-of-the-art high-fidelity training devices, complex computer-based, highly interactive distributed learning products, and comprehensive, dynamic technical publications. LSI employee-owners collaborate to deliver training products and services for a myriad of programs and customers, using leading-edge technology and proven processes. Mission Our mission is to prepare our military and allies to be battle-ready through cutting-edge training products and services. Vision Our vision is to be the premier provider of military training solutions, renowned for our innovation and excellence. Through employee-ownership and teamwork, we will shape a future where every military service member is equipped to succeed in their mission. Guiding Principles ESOP Sustainability: We do everything within our control to meet project budgets and schedules, so our ESOP prospers. Take Ownership: Each Employee-Owner takes ownership at the individual level for their words, actions, and results. Individual ownership breeds accountability. Accountability breeds trust. When we hold ourselves accountable and trust our fellow employee-owners to do the same, we realize success. Clear Communication: We project confidence in our communication using unambiguous language and providing clear purpose and direction. Pursuit of Excellence: We aggressively pursue continuous improvement both as teams and individual employee-owners. We strive to get better every day. There is no room for mediocrity. Pride in Our Work: We know the value of our work and are proud of what we produce. Customer Focus: Customers are both internal and external and we strive to give both our best efforts. Assume Positive Intent: Assume others are well-intentioned in their actions and seek additional information about the circumstances to help solve problems. Assuming positive intent in all interactions is the key to building strong teams and working together to solve problems. One Voice: Every Employee-Owner is expected to speak up if they have an idea for improvement or if they disagree with a potential course of action. Once a decision is made, the entire team commits to it and moves forward with one voice. Apply: https://www.lsijax.com/careers/ General Summary The Cybersecurity Engineer II will perform intermediate system analysis, design, and implementation regarding cybersecurity as it applies to a variety of information systems, ranging from stand-alone workstations to fully integrated networked training devices, in accordance with Department of Defense (DoD) regulations and guidance. Essential Job Functions Plans, conducts, and supports accreditation efforts for fielded information systems, including training devices. Patches and provisions hardened Operating Systems (OS) for fielded and prototype information systems. Ensures that improving system security does not adversely impact functionality and be able to provide technical demonstrations. Assists software engineers, field technicians and other teammates in complex troubleshooting. Trains and mentors' entry-level cybersecurity engineers. Conducts comprehensive security control assessments and produce supporting artifacts such as security test plans and risk assessment reports, architecture analysis reports and other formal technical reports as needed. Creates, modifies, and maintains documentation related to the security posture of specialized information systems, including policies and systems architecture. Develops and briefs technical interchange meetings such as In-Progress Review (IPR) events, recording minutes and specifying Action Items for follow-on tasking. Works with the engineering team and management to assure timeline and scope requirements are met. Contributes to Risk Management Framework (RMF) and cybersecurity engineering projects and coordinates with other engineers on tasking. Performs installations and security assessments at customer sites, including cleared sites, as well as early testing on pre-release products. Contributes to technical proposals in conjunction with the marketing team, assuring they are technically accurate and professionally presented. Must be capable of safely handling government-furnished equipment and materials. Must be available to work a standard weekly schedule with overtime as required. Perform other duties as assigned. Job Requirements: Knowledge, Skills, and Abilities Familiarity with applying DoD Instruction 8510.01 Risk Management Framework (RMF) for DoD Systems, effective July 19, 2022 (or subsequent issuances) to Information Systems (IS). Must remain informed of all applicable regulatory guidelines regarding cybersecurity for DoD Information Technology (IT) as published by the National Institute of Standards and Technology (NIST), DoD itself, or by other relevant defense entities. Must be knowledgeable of or experienced in acquisition and sustainment procedures for DoD IT as it pertains to contractors, as defined in issuances such as DFARS 252.204-7012, NIST SP 800- 171, NIST 800-53, Cybersecurity Maturity Model Certification (CMMC), and other regulatory publications. Must possess experience installing and configuring security settings for Microsoft Windows 10, Red Hat Enterprise Linux 7, 8, & 9 (or similar Unix equivalent), or newer OS implementations. Must demonstrate OS configuration management techniques including scripting, deployment, and disk imaging/cloning. Must possess expertise with computer security software, including whitelisting, anti-virus, file integrity validation, and vulnerability assessment & reporting tools. Must have excellent reading, writing, presentation, and general communication skills. Ability to communicate effectively, both verbally and in writing. Must be able to obtain a security clearance when required by the contract. Education and Experience Bachelor’s degree in computer science or related technical discipline, or equivalent professional experience. A concentration in Computer Security Administration or related discipline is preferred. Two (2) years of experience in computer security. Information Assurance Workforce certification (as described in DoD 8570.01-M or subsequent revision) of IAT-II minimum required. Experience in simulation, computer, or systems engineering preferred. Position requires eligibility for a security clearance.