nessus jobs in San Diego

Lead Information Assurance and security engineering for Navy tactical networks (CANES), managing end-to-end Risk Management Framework (RMF) authorization, hardening virtualized and cloud network stacks, and ensuring compliance across diverse naval environments. Develop and maintain security authorization artifacts (SSP, SAP/SAR, POA&M, ATO packages in eMASS), apply DISA STIGs and vulnerability management tools (ACAS, NESSUS, SCAP), and provide IA guidance for application integration aligned with DoDAF and Net-Ready KPP baselines.…See more Support developmental testing, audit response, and continuous monitoring while coordinating with PEO C4I, NIWC Pacific, and Fleet stakeholders. Mentor junior engineers and champion DevSecOps and STIG automation practices.

Information Systems Security Engineer II supporting DoD Ballistic Missile Defense C4I systems with cybersecurity engineering, vulnerability management, and Risk Management Framework activities. Responsibilities include implementing cybersecurity controls, conducting DISA STIG assessments, performing vulnerability scans with tools like ACAS and Nessus, managing patches, maintaining eMASS RMF artifacts, and coordinating remediation across Windows, Linux, Hyper-V, and network environments.…See more Must assess cybersecurity risk, document findings, and support system authorization while maintaining operational readiness in a DoD test, integration, and evaluation environment.

The RMF Engineer will support DoD Assessment & Authorization activities by developing, maintaining, and managing Risk Management Framework documentation and artifacts throughout the system lifecycle. Key responsibilities include system categorization, creating and updating security plans and control evidence, managing RMF packages in eMASS, assessing security controls, and coordinating with engineering and cybersecurity teams on remediation.…See more The role requires 3+ years of hands-on DoD RMF experience, deep knowledge of NIST SP 800-53 and RMF processes, and proficiency with authorization management tools. This hybrid position is mostly remote and demands strong technical documentation and stakeholder communication skills.