Information Security Engineer

2 weeks ago

Huntington Beach, United States Mach Industries Full time

Mach is a defense manufacturing company that builds munitions to help the United States win future wars. Backed by $85M in funding from top venture firms, our small lean team ideates, designs, manufactures, and sells cutting-edge weapons to the Department of Defense.

Role Summary:

We are seeking a skilled Information Security Engineer to join our team, responsible for protecting our organization's information systems and data. The primary objective of this role is to implement and maintain security measures that comply with industry standards, including NIST 800-171 and CMMC, while effectively managing risks associated with information security. The successful candidate will play a vital role in conducting risk assessments, responding to security incidents, and a culture of security awareness within the organization.

This position is located at our HQ office in Huntington Beach, CA and is needed onsite daily. This role is not eligible for relocation benefits.

Key Responsibilities:

  • Implement and maintain compliance with NIST 800-171 and CMMC frameworks, ensuring the organization meets all necessary security requirements.
  • Conduct comprehensive risk assessments to identify vulnerabilities and implement effective risk mitigation strategies across the organization.
  • Stay current with DoD cybersecurity policies, including the Risk Management Framework (RMF), to ensure all practices align with regulatory requirements.
  • Utilize SIEM, EDR/XDR, and SOAR tools to monitor, assess, and enhance the security posture of the organization.
  • Execute scanning, reconnaissance, and penetration testing to discover weaknesses in security defenses and enhancements.
  • Manage and secure cloud services, including but not limited to AWS, Azure, and DISA mil, ensuring compliance with security requirements.
  • Develop scripts using bash, shell, PowerShell, and other programming languages to automate security tasks and improve efficiency.
  • Lead responses to security incidents, overseeing investigation, containment, eradication, and recovery processes. Conduct post-incident reviews and suggest improvements for future prevention.
  • Design and conduct security training and awareness programs to educate staff on security policies and best practices, promoting a security-first culture.
  • Maintain detailed documentation of security systems, policies, procedures, and incident reports. Update security documentation as necessary to reflect changes in procedures or regulations.
  • Conduct detailed analysis of security events, compile data, and provide insights in written reports, correspondence, or verbal briefings to stakeholders.
Minimum Qualifications:
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
  • Minimum of 5 years of experience in cyber/information security roles, with a focus on risk assessment and compliance.
  • Hands-on experience with NIST 800-171, CMMC, and the Risk Management Framework (RMF).
  • Proficiency with SIEM tools, EDR/XDR tools, SOAR tools, and cloud security tools. Familiarity with IT networking, Windows, and cloud systems.
  • Proficient in bash, shell, PowerShell, Python, and/or basic scripting on Linux and Windows platforms.
  • Strong analytical skills, attention to detail, and the ability to manage multiple projects in a fast-paced environment.
Preferred Qualifications:
  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or similar credentials.
  • Experience with advanced cybersecurity frameworks and methodologies, including incident response and penetration testing.
  • Experience with securing cloud platforms and services, particularly AWS, Azure, and GCP.
Ideal Candidate:
  • The ideal candidate is proactive, detail-oriented, and thrives in a dynamic, collaborative environment. They possess a strong understanding of information security principles and the ability to analyze complex security issues. A successful Information Security Engineer will have experience in conducting risk assessments and implementing security measures that are compliant with industry standards. They should be adept at using various security tools and technologies, as well as possess a solid foundation in IT networking and cloud security. Strong communication and training abilities are essential for this role, as the candidate will be responsible for fostering a culture of security awareness within the organization.


Disclosures

This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (EAR) and the International Traffic in Arms Regulations (ITAR). Please note that any offer for employment may be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations without sponsorship for an export license.

The salary range for this role is an estimate based on a wide range of compensation factors, inclusive of base salary only. Actual salary offers may vary based on (but not limited to) work experience, education and training, critical skills, and business considerations. Highly competitive equity grants are included in most offers and are considered part of Mach's total compensation package. Mach offers benefits such as health insurance, retirement plans, and opportunities for professional development.

Mach is an equal opportunity employer committed to creating a diverse and inclusive workplace. All qualified applicants will be treated with respect and receive equal consideration for employment without regard to race, color, creed, religion, sex, gender identity, sexual orientation, national origin, disability, uniform service, Veteran status, age, or any other protected characteristic per federal, state, or local law, including those with a criminal history, in a manner consistent with the requirements of applicable state and local laws. If you'd like to defend the American way of life, please reach out

  • Cyber Security Specialist

    4 weeks ago

    Cocoa Beach, Florida, United States ENSCO Full time

    Job Description:ENSCO Inc. is seeking a highly skilled Information Systems Security Engineer (ISSE) to join our team in Cocoa Beach, FL.The successful candidate will primarily support the Eastern Range (ER) Launch and Test Range Systems (LTRS) ISSE team located at Patrick Space Force Base (PSFB), Florida.The Launch and Test Range Systems are critical...

  • Information Systems Security Manager

    2 months ago

    Fort Walton Beach, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphSuitability:Public Trust/Other Required:NoneJob Family:Information SecurityJob Qualifications:Skills:Information Security, Information Security Management, Information System SecurityCertifications:Cisco Certified...

  • Information Systems Security Manager

    3 weeks ago

    Fort Walton Beach, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphPublic Trust/Other Required:NoneJob Family:Information SecurityJob Qualifications:Skills:Information Security, Information Security Management, Information System SecurityCertifications:Cisco Certified Network...

  • Security Operations Program Manager

    4 weeks ago

    Virginia Beach, Virginia, United States Applied Information Sciences Full time

    About the RoleAt Applied Information Sciences, we're seeking a skilled Cyber Security Program Director to join our team. As a key member of our organization, you will be responsible for the technical direction and growth of our Security Operations Program. This program is focused on serving highly secure US Government clients, and you will play a critical...

  • Information Security Specialist

    4 weeks ago

    Newport Beach, United States Randstad Full time

    Job Summary:Randstad is seeking an experienced Security and Remediation Vulnerability Engineer to support a customer. The ideal candidate will have five or more years of experience with vulnerability management, planning, design, and mitigation efforts. The role involves designing, engineering, and implementing security measures for the protection of...

  • Data Software Engineer

    2 weeks ago

    Newport Beach, United States Obsidian Security Full time

    Job DescriptionJob DescriptionAbout Us:Obsidian Security was founded in 2017 to solve the unaddressed blindspot of SaaS Security. SaaS applications provide the tools employees need to succeed and hold the business' most critical information. If those tools become unavailable or that data is jeopardized, there is a detrimental impact on the organization....

  • Cyber Security Engineer

    4 weeks ago

    Virginia Beach, Virginia, United States PGTEK Full time

    Job SummaryPGTEK is seeking a highly skilled Cyber Security Engineer to join our team. As a key member of our organization, you will be responsible for implementing and maintaining information security controls associated with development, delivery, and continuous monitoring of complex, high-performance, mission-critical information technology systems.Key...

  • Information Security Specialist

    4 weeks ago

    Deerfield Beach, Florida, United States MotionPoint Full time

    Job Summary:We are seeking a highly skilled Information Security Analyst to join our team at MotionPoint. This role will involve analyzing and managing overall information security across various aspects, including technical, organizational, and policy-based components.Key Responsibilities:Conduct risk assessments to identify and evaluate potential security...

  • Principal Software Engineer

    2 weeks ago

    Newport Beach, United States Obsidian Security Full time

    Job DescriptionJob DescriptionAbout Us:Obsidian Security was founded in 2017 to solve the unaddressed blindspot of SaaS Security. SaaS applications provide the tools employees need to succeed and hold the business' most critical information. If those tools become unavailable or that data is jeopardized, there is a detrimental impact on the organization....

  • Principal Software Engineer

    3 weeks ago

    Newport Beach, United States Obsidian Security Full time

    About Us: Obsidian Security was founded in 2017 to solve the unaddressed blindspot of SaaS Security. SaaS applications provide the tools employees need to succeed and hold the business' most critical information. If those tools become unavailable or that data is jeopardized, there is a detrimental impact on the organization. Obsidian proudly offers the...

  • Cyber Security Engineer

    4 weeks ago

    Redondo Beach, United States Robert Half Full time

    Job DescriptionJob DescriptionWe are inviting applications for the role of a Cyber Security Engineer located in Manhattan Beach, California. The successful individual will be part of a dynamic team, focusing on safeguarding our systems, networks, and data across various environments. The role involves implementing security controls, ensuring compliance with...

  • Information System Security Officer

    2 weeks ago

    Virginia Beach, United States Delaware Nation Industries Full time

    Overview Delaware Nation Industries is supporting the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWCDD DNA). We will be providing enterprise management and technical support of the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWC DD DNA) by providing assistance in policy, procedures, seat refresh,...

  • Principal Software Engineer

    4 weeks ago

    Newport Beach, United States Obsidian Security Full time

    Job OverviewObsidian Security is seeking a highly skilled Principal Software Engineer to join our team. As a key member of our engineering team, you will play a critical role in shaping the future of our technology platform.This is a challenging and rewarding opportunity for a seasoned software engineer who is passionate about delivering high-quality...

  • Security Engineer

    3 weeks ago

    Virginia Beach, United States Falcon IT & Staffing Solutions Full time

    30th October, 2024Role: Security Engineer. Location: Hybrid / Washington DC (2 days onsite) Job Description: Imagine being a key player in fortifying the defenses of a dynamic enterprise environment, where your expertise not only safeguards critical systems but also contributes to the growth and success of an innovative solutions and services business. As a...

  • Principal Software Engineer

    4 weeks ago

    Newport Beach, United States Obsidian Security Full time

    About Us:At Obsidian Security, we're dedicated to solving the unaddressed blindspot of SaaS Security. Our mission is to provide the industry's most comprehensive and powerful SaaS defense solution, ensuring the security and integrity of our customers' data.We're a passionate team of cybersecurity experts, committed to solving some of the biggest challenges...

  • Senior Systems Engineer

    4 weeks ago

    Virginia Beach, Virginia, United States General Dynamics Information Technology Full time

    Job Summary:We are seeking a highly skilled Senior Systems Engineer to join our team at General Dynamics Information Technology. As a Senior Systems Engineer, you will be responsible for managing and executing engineering activities, developing technical approaches and plans, and determining the scope of work tasks to complete the technical effort.Key...

  • Network Security Engineer III

    4 weeks ago

    Virginia Beach, Virginia, United States Imagine One Technology and Management Ltd Full time

    Job Summary:Imagine One Technology and Management Ltd. is seeking a highly skilled Network Security Engineer III to provide network-engineering support to pre-delivery and in-service LCS ships. The successful candidate will serve within a team of engineers for the LCS Total Ships Computing Environment (TSCE) core business network and provide support for the...

  • Senior DevOps Engineer

    7 days ago

    Virginia Beach, Virginia, United States Applied Information Sciences Full time

    At Applied Information Sciences, we value innovation and collaboration. We are seeking a skilled DevOps Engineer to join our team.Job SummaryThis is an exciting opportunity for a motivated and experienced DevOps Engineer to work with our clients and design, implement, and maintain technical solutions using the latest technologies.ResponsibilitiesCollaborate...

  • Information Security Governance Analyst

    4 weeks ago

    Virginia Beach, Virginia, United States Insight Global Full time

    Job DescriptionInsight Global is seeking an experienced Information Security Governance Analyst to join one of our largest healthcare clients. This is a fully remote position in an approved state, and will be a 6-month contract-to-hire format. The pay for this role is expected to be $40-$47/hr with a conversion salary range of $85,000 to $90,000.This...

  • Information Technology Analyst

    1 month ago

    Huntington Beach, United States Temporary Staffing Professionals Full time

    We are seeking a skilled IT Analyst to join our client’s team on a contract basis. The IT Analyst will play a crucial role in supporting technology programs, maintaining and fixing network systems, and ensuring the security and reliability of various technology systems. The ideal candidate will have a strong technical background, problem-solving skills,...