Information Systems Security Engineer; ISSE - SME

Overview

JBW Federal is a subsidiary company of the Kanaka Foundation - An NHO whose mission is to support Native Hawaiians.

You will receive a comprehensive benefits package that includes:

• Health insurance
• Dental insurance
• Vision insurance
• Pet insurance
• Annual membership to Costco or Sam's
• 401K
• ...and much, much more!

• You will understand system engineering and cybersecurity concepts and methodologies at the professional level with knowledge equivalent to:
  Certified Information Systems Security Professional, Cisco Certified Network Professional, VMWare Certified Professional, or similar certifications.
• You will train staff on, and oversee the use of, information security standards, policies, and best practices while performing duties outlined in national standards including, but not limited to: CNSSI 4009, NIST 800-37, and NIST 800-160.
• You will create, draft, and maintain Security Assessment and Authorization packages.
• You will provide artifacts for RMF packages including, but not limited to:
  Security Plans, Security Assessment Reports, Security Controls Traceability Matrix, and Plan of Action and Milestones.
• You will assist and consult in the development of information security procedures to ensure systems comply with Cybersecurity and Information Assurance and Cybersecurity standards and best practices including, but not limited to:
  Endpoints, Switches, Routers, Firewalls, and Servers.
• You will assist and consult in technical management including, but not limited to:
  Business/Mission Analysis, System Requirements Definitions, System Design/Architecture, Defense in Depth, Zero Trust, Domain Separation, and Disaster Recovery.
• You will assist/consult in technical processes including, but not limited to:
  Project Planning, Configuration Management, Risk Management, and Information Management.
• You will ensure proper implementation of technical security controls and measures including, but not limited to: STIGs, AAA, VPN, Public Key Infrastructure (PKI), Identity, Credential, and Access Management (ICAM), and Security Patches.
• You will ensure all systems are properly logging events through the use of Security Incident and Event Monitor (SIEM) for live monitoring and alerts. You will perform system audits, vulnerability scans, and threat assessments on all networks including, but not limited to:
  System Analysis/Forensics and Anomaly Detection.
• You will perform incident response activities and conduct investigations of information security breaches to identify vulnerabilities and evaluate the damage including, but not limited to:
  Provide Intelligence, Provide Reports and Malware Reverse Engineering.
• You will stay up to date on emerging technologies, exploits, vulnerabilities, and hacker techniques and provide briefings and reports to leadership.

• Master's Degree (preferably in a STEM field) or Approved Equivalent Experience
• 6 years of risk management framework experience within the last 8 years
• IAT/M Level III Certification
• Ability to travel CONUS and OCONUS Occasionally. Must have a current passport or able to acquire within the first 60 days of employment
• Clearance - Top Secret/SCI

Kanaka Family of Companies is an Equal Opportunity Employer, and all qualified candidates will receive consideration for employment without regard to race, color, religion, national origin, marital status, sex (including pregnancy), gender identity or expression, age, disability, veteran status, sexual orientation, genetic information (family medical history), or any other status protected by federal, state or local laws. EEO/AA employer/Vet/Disabled.