openqareer

Cybersecurity Engineer or Technician— Portable Doppler Radar (PDR)

EWR Radar Systems · St. Louis, MO 63122

# Cybersecurity Engineer or Technician— Portable Doppler Radar (PDR) **EWR Radar Systems** · St. Louis, MO 63122 · `On-site` 🕒 **Статус:** *Опубликовано: 3 дня назад* · *Источник: Indeed* --- ### About the Role U.S. citizenship required · must be able to obtain and maintain a DoD Secret clearance ABOUT EWR EWR Radar Systems designs, builds, and sustains solid-state weather radar for the U.S. Department of Defense and civil customers. Headquarters is 336 Leffingwell Ave, Kirkwood, MO. The U.S. Air Force fields our E700XD Portable Doppler Radar (PDR) systems; we hold contractor logistics support for those radars. Systems also go to other DoD users, NOAA, and international customers. This role owns cybersecurity for those fielded radars and for the software that runs them (EWR Watch: C# / .NET, Linux, Docker), not a corporate SOC. CLEARANCE You must be a U.S. citizen and able to obtain and maintain a DoD Secret security clearance. Employment is contingent on remaining eligible for Secret. An active Secret clearance is preferred but not required to start if you can be sponsored. You cannot hold this job if you cannot be granted Secret. WHAT YOU WILL DO Own the Air Force PDR patch process: plan, test, package, and apply OS and application patches to radar servers and operator stations on the recurring AF calendar. Run quarterly DISA STIG scans (including the Q2 STIG cycle) on Linux, Windows, web, database, and application stacks used on PDR and related systems. Run Tenable (Nessus / ACAS) scans, triage findings, remediate or document residual risk (POA&Ms), and produce packages the USAF program office will accept. Maintain the security baseline for fielded, often air-gapped radars: offline updates, local accounts, certificates, SSH, firewall, and customer constraints (including no-Java / isolated networks). Work with Watch and related software so authentication, TLS, logging, containers, ports, and config changes stay inside the accredited baseline. Keep RMF / ATO evidence current: STIGs, scans, hardware/software inventory, configuration baselines, change records. Coordinate with EWR engineering in Kirkwood and with USAF PDR stakeholders (patch, STIG, and Tenable reviews). Occasional travel to U.S. or international customer sites. Day-to-day work is at the Kirkwood office. MUST HAVE U.S. citizenship. Ability to obtain and maintain a DoD Secret clearance (active Secret preferred). Hands-on STIG work: you have applied STIGs, not only read them (STIG Viewer, SCC, Evaluate-STIG, or equivalent). Hands-on Tenable or ACAS: scan, false-positive handling, remediation, residual-risk write-up. Linux administration (RHEL, Ubuntu, or similar) on servers that are not cloud consoles: packages, services, firewall, logs, certificates. Windows server/workstation hardening in a DoD context. Patch management on systems you cannot casually reboot or update from the internet. Clear written English: scan reports, POA&Ms, and patch notes a program office can file. STRONGLY PREFERRED Active Secret clearance. DoD RMF (NIST SP 800-53 / 800-37) and support of an ATO or ongoing authorization. DISA STIGs for nginx/Apache, PostgreSQL, .NET, Docker/containers, and Windows. CMMC / NIST SP 800-171 in a small contractor environment. Enough C# / .NET or application-security background to work next to Watch developers. Docker / nginx on Linux; offline or field-deployed systems. CompTIA Security+, CySA+, CISSP, or another DoD 8140/8570 baseline certification. Prior USAF, USMC, or other DoD C5ISR / weather / radar / industrial-control adjacent work. THIS JOB IS NOT A 9-to-5 SOC watching SIEM alerts. A GRC-only role that never logs into a box. A cloud-native “zero trust in AWS” role. These radars are physical, often isolated, and must stay operational. COMPENSATION Salary based on experience. Someone who has run STIGs and Tenable on real boxes and can be Secret-cleared. The top of the band is for an active-Secret hire who has owned an RMF/ATO package and a patch cycle without a lot of coaching. HOW WE WORK EWR is a small manufacturer (tens of people, not hundreds). You will be the cyber owner for PDR and related products: on the servers, in the scan tools, and in the paperwork. You sit with engineering in Kirkwood, not in a separate security department. Send a resume that names specific STIGs, scanners, OS versions, and programs you have touched. State clearance status (active Secret, previously held, or eligible / never held). “Familiar with NIST” without scan/remediation evidence will not be competitive. Benefits: 401(k) Dental insurance Health insurance Paid time off Vision insurance Work Location: In person

Наблюдалась 2026-09-21, впервые 2026-09-18, источник — Indeed.

Открыть у работодателя