Description:
As a Cybersecurity Engineer your duties will include the following, but are not limited to:
- Lead all technical security activities required to prepare the system for its formal security assessment and authorization.
- Engineer, implement, and validate the technical security controls required by NIST SP 800-53 and as tailored by the JSIG. This includes hands-on hardening of operating systems, network devices, applications, and databases in accordance with DISA STIGs.
- Author, compile, and maintain the complete RMF security documentation package. This includes creating and managing the System Security Plan (SSP), system diagrams, hardware/software lists, and detailed descriptions of control implementations.
- Manage the system's security posture by conducting vulnerability scans with tools like ACAS, analyzing results, and leading remediation efforts with the system administration team.
- Act as the primary technical point of contact during security control assessments. You will be responsible for demonstrating control effectiveness to government assessors and defending the system's security design.
- Develop and execute a robust continuous monitoring strategy to ensure the system remains compliant and secure post-ATO, including analyzing audit logs and responding to security events.
Required Qualifications
- U.S. Citizenship
- Bachelor's Degree in Computer Science, or a related field or equivalent experience
- 10+ years in cybersecurity/information assurance, with at least 5 years in a hands-on ISSE role.
- TS Clearance is required.
- Experience leading a DoD system through the full RMF lifecycle to successfully achieve an ATO at the TS//SAR level. You must be able to speak authoritatively on this process from start to finish.
- Demonstrable, in-depth experience implementing and validating controls under the JSIG.
- Must meet DoD 8140 IASAE Level II or III requirements.
- Expert-level knowledge of RMF, JSIG, NIST SP 800-53, and DISA STIGs.
- Proficiency with security tools such as ACAS/Nessus, SCAP Compliance Checker (SCC), and SIEM solutions.
- Strong technical understanding of operating systems (Windows/Linux), networking concepts, and virtualization.
Preferred Qualifications
- CISSP-ISSEP (Information System Security Engineering Professional) certification.
- Bachelor's or Master's degree in Cybersecurity or a related technical field.
- Experience with automated compliance and hardening tools.
- Experience securing cloud environments within AWS GovCloud or Azure Government.