Information Systems Security Engineer at OSI Systems | in Richardson, TX

Job description

Overview Continental Electronics Corporation is a leading provider of RF technologies and innovative solutions with 80 years of proven performance. CEC has experienced significant recent growth and has established itself as the go-to supplier for a diversified product line supporting a wide spectrum of markets from commercial products, military customers, to space research laboratories. The Information System Security Engineer supports the reliable, secure, and compliant operation of classified information systems, networks, and supporting infrastructure. This position performs day to day administration of servers, virtualized environments, operating systems, network services, user services, storage, backups, cybersecurity, and network-connected systems in support of organizational and customer mission requirements. The Information System Security Engineer works closely with Information System Security Officers (ISSOs), Information System Security Manager, program personnel, and other stakeholders. The Information System Security Engineer will maintain system availability, implement approved changes, remediate technical issues, and sustain the security posture of the environment. This is a hands-on, mid-level technical position. The successful candidate will have practical experience administering Windows and/or Linux servers, virtual machines, network services, user accounts and access controls, patching, backups, system monitoring, and technical documentation in a DoD, federal, defense-contractor, regulated, or similar security-conscious environment. Responsibilities Contribute to the implementation and maintenance of cybersecurity programs for classified systems Configure, maintain, troubleshoot, and document systems prior to and after they receive an Authorization to Operate (ATO) Contribute greatly to success of compliance activities associated with NIST SP 800-171, NIST SP 800-53, RMF, applicable STIGs and DCSA and Customer requirements Monitor security tools, system logs, audit records, and vulnerability scan results Monitor and respond to cybersecurity threats and analysis by reviewing alerts, indicators of compromise, system activity, and security events for potential risks Assist with vulnerability management activities, including scan coordination, risk validation, remediation tracking, and verification of corrective actions Assist with developing, updating, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, procedures, and other cybersecurity documentation Devise new Plans of Actions and Milestones when necessary Support system accreditation and authorization activities, including preparation of ATO packages and supporting artifacts Participate in security assessments, self-inspections, customer audits, and government reviews. Track remediation activities for identified vulnerabilities and security findings Coordinate with Information System Security Managers (ISSMs), Facility Security Officers (FSOs), network administrators, and program teams to ensure compliance requirements are met Assist with incident response activities, investigations, and reporting requirements Maintain cybersecurity records and evidence required for audits and assessments Perform day to day security administration and continuous monitoring activities Support user account reviews, access control validation, and privileged account management activities Promote cybersecurity hygiene across systems and users, including secure configuration, least privilege, strong authentication, patch awareness, and protection of sensitive data Ensure proper handling, storage, transmission, and destruction of classified and Controlled Unclassified Information (CUI) Participate in security awareness and user training initiatives Stay informed of emerging threats, vulnerabilities, and changes to regulatory requirements Uphold the company’s core values of Integrity, Innovation, Accountability, and Teamwork Demonstrate