Cyber Security Specialist

About This Role

Who We Are:

• CAE Vision: Our vision is to be the worldwide partner of choice in defense and security, civil aviation, and healthcare by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety, efficiency and readiness.
• CAE Defense & Security Mission: CAE's Defense and Security business unit focuses on helping prepare military customers to develop and maintain the highest levels of mission readiness.
• CAE Values: Empowerment, Innovation, Excellence, Integrity and OneCAE make us who we are and we strive to make a difference in the world while helping each other succeed.

What We Have to Offer:

• Comprehensive and competitive benefits package and flexibility that promotes work-life balance
• A work environment where all employees are valued, respected and safe
• Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
• Recognition, professional development, advancement and having fun!

Summary

The Cybersecurity Specialist implements the Risk Management Framework for assessment and authorization of cloud based applications and simulator training systems.  The primary role of the candidate is to ensure compliance with National Institute of Standards and Technology (NIST) Special Publications (800 -37, 800-53, 800-171) and Department of Defense (DoD) Instructions 8500.01 Cybersecurity and 8510.01 Risk Management Framework. The Cybersecurity Specialist requires ability to develop plans and procedures, conduct vulnerability and compliance scanning, assess and implement security controls, and develop plans of actions and milestones to resolve information security vulnerabilities.  The candidate’s role is to support the Information Security staff in the continuous monitoring of information systems ensuring that the authorized security posture is maintained. 

Essential Duties and Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Maintain a clear understanding of NIST and DoD Cybersecurity and Information Assurance instructions 
• Assess and implement operational, management and technical security controls and make recommendations and proposals for correcting deficiencies; develop compensating controls for information security deficiencies
• Assist with developing or updating of Information Security related plans, procedures, work methods and documentation
• Review current programs and define the steps needed for meeting the applicable cybersecurity and information assurance instructions.  This includes detailed planning of all aspects of IA Compliance
• Conduct information security vulnerability and compliance scanning using the DoD’s Assured Compliance Assessment Solution (ACAS) (Tenable Security Center and Nessus Software)
• Produce information security vulnerability scanning reports and develop Plans of Action and Milestones (POA&Ms) to resolve information security vulnerabilities
• Support, monitor, test and troubleshoot hardware and software cybersecurity issues and patches
• Apply computer changes to comply with DoD Security Technical Implementation Guides (STIGs)
• Application of DoD Information Assurance Vulnerability Management Program (IAVM)
• Work closely with information technology staff to define required tasks to be accomplished to meet IA instructions
• Work closely with customers to define program IA requirements.
• Writing Information Assurance documents to define plans and scope of IA requirements.
• Write Proposal sections to explain how CAE will meet IA instructions.
• Operating system level setup of computers to implement controls and apply patches to eliminate vulnerabilities.
• Perform other administrative functions/duties as assigned

Qualifications and Education Requirements

• B.S. degree in Computer Science