Sr. Cybersecurity Engineer

• Provide Security Engineering to the Government in support of the RMF
• Support Assessment and Authorization (A&A) activities to maintain compliance with DoD 8500 series publications
• Document the protection and sustainment of the cybersecurity requirements to include; protection of the operating environments and software, including network, operating systems and databases; integration and implementation of cybersecurity features for client-server and web enterprises
• Monitor, report, and assist the government in maintaining FISMA compliance
• Ensure projects are in compliance with DODD and DODI 8500 Cybersecurity series, to meet DoD cybersecurity requirements through the application of integrated layered protection of DoD information systems and networks
• Establish or strengthen an Information system security engineering process that captures and refines information security requirements and ensures that the requirements are effectively integrated into government information technology products and information systems through security architecting, design, development and configuration
• Employ Government security best practices when identifying and recommending security controls to be employed within customer information system
• Provide traceability from the cybersecurity controls to the requirements supporting them, the corresponding design, and the associated cybersecurity testing
• Identify IT security program implications of new technologies or technology upgrades, cost, and analyze economics and risk as part of the decision-making processes
• Ensure that accepted products meet Common Criteria requirements and advise the government of changes affecting the cybersecurity posture of information system
• Establish an Information Assurance Vulnerability Management (IAVM) program to include IAVM master plan, process flow and additional documentation

• Minimum of 6 years of experience working as a Security Engineer, Security Controls Assessor, or in another related IT Security role
• Working knowledge of the Risk Management Framework (RMF) and its application
• Understanding of FISMA and FISMA compliance challenges
• Working knowledge of DOD 8500 serious publications and their applicability to IT Systems
• Experience with Vulnerability Management and applying security patches, and hotfixes
• Experience with the Assessment and Authorization (A&A) process
• Experience helping to bring IT systems to ATO
• Experience with System Administration and scripting

• Bachelor's degree from an accredited college or university
• Requires an Active TOP SECRET national security clearance

• Must be legally authorized to work in the United States of America. Sponsorship will not be a part of this contract.
• Must successfully complete a Blue Sky and customer background screening.

Last updated on Sep 5, 2023