Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.… Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.
disa-stigs jobs in San Diego
Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.… Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.
Network Engineer III supporting testing of communications between a Surrogate MQ-25 Air Vehicle and Ground Control Station, including narrowband and wideband satellite and line-of-sight links for C4I operational network evaluation. The role requires 4+ years of DoD/government network engineering experience, demonstrated proficiency in Layer 2/3 protocols (BGP, DMVPN, IPSec, EIGRP, OSPF, VRRP, STP), Cisco routing and switching, Linux system administration, and network automation tools (Ansible, Python).… Responsibilities include designing and testing multi-vendor network systems, writing test plans and procedures, performing Wireshark traffic analysis, configuring network devices (routers, switches, firewalls, INEs), applying DISA STIGs, and generating RMF artifacts. A Bachelor's degree in Network Engineering or related field and CCNA certification are required; CCNP or CCIE preferred.
The Information Systems Security Manager (ISSM) will lead organizational information security strategy, frameworks, and compliance across defense and classified environments. Responsibilities include developing and maintaining security policies aligned with NIST SP 800–171, DFARS, and ISO 27001; leading CMMC and ISO 27001 certification efforts; managing CUI and classified information handling; conducting risk assessments and vulnerability analyses; overseeing incident response; and serving as the primary liaison with government agencies and customers on security compliance.… The role requires 7+ years of information security management experience, with 3+ years in a leadership capacity, and deep expertise in NIST, DFARS, DISA-STIGs, ISO 27001, classified information protocols, and risk governance.
The Information Systems Security Manager will develop, implement, and maintain the company's information security policies and compliance programs aligned with NIST SP 800-171, DFARS, ISO 27001, and CMMC requirements. Responsibilities include overseeing Controlled Unclassified Information (CUI) and classified information protection, conducting risk assessments and vulnerability analyses, leading incident response efforts, and serving as primary liaison with government agencies on compliance matters.… The role requires 7+ years of information security management experience with at least 3 years in a leadership position, and extensive knowledge of defense industry security standards and classified information handling protocols. The ISSM will collaborate with DevSecOps, IT, and engineering teams to integrate security controls across operations and maintain continuous Authority to Operate (cATO) pipelines.
Network Engineer III will support testing of communications between a Surrogate MQ-25 Air Vehicle and Ground Control Station, including narrowband and wideband satellite and line-of-sight links. Responsibilities include designing and troubleshooting multi-vendor network systems (routers, switches, firewalls), writing test plans and procedures, performing Wireshark traffic analysis, configuring network devices, and applying DISA STIGs.… The role requires 4+ years of DoD/government network experience, proficiency in Cisco routing/switching, Layer 2/3 protocols (BGP, DMVPN, IPSec, OSPF, EIGRP, VRRP, STP), Linux administration, and network automation tools (Ansible, Python). CCNA certification is mandatory and Secret clearance must be held at start.
The Systems Administrator II maintains and supports IT infrastructure integrity, availability, and performance for a DoD contract environment. Key responsibilities include Active Directory administration (ADUC, DNS, GPO, WSUS), PKI credential management, system maintenance, software/hardware upgrades, troubleshooting, and compliance monitoring via DISA STIGs.… The role requires a Bachelor's degree in IT or related field, 3+ years of relevant experience, and an IAT Level II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).