Cybersecurity Engineer

Job Description

We are looking for a highly skilled TS/SCI cleared Cybersecurity Engineer to support the end-to-end security implementation, assessment, and maintenance of a classified information system. This role involves risk assessment, compliance verification, security documentation, vulnerability remediation, and continuous monitoring across multiple security domains.

The ideal candidate should have experience in classified IT security, RMF/ATO processes, continuous monitoring, security documentation, and vulnerability management to ensure the ongoing compliance and protection of critical mission systems.

This position may require occasional CONUS travel for short durations.

Job Brief:

• Develop, document, and maintain cybersecurity implementation and verification plans to support system accreditation and assessment.
• Conduct continuous security assessments to ensure compliance with RMF/ATO requirements and a continuous monitoring program.
• Resolve vulnerabilities and compliance findings through patching, regression testing, and security updates.
• Track all security issues uncovered during the system lifecycle (design, testing, deployment, operations) and report associated risks to the Government.
• Update all cybersecurity documentation in the RMF Workflow Management Tool

Qualifications:

• Minium of 5 years' relevant experience working in IT, Cyber, or Systems Security
• Intelligence Community (IC) experience
• BS degree in STEM or a field that is relevant to this position
• TS/SCI clearance with CI Poly (must be willing to complete CI poly within 30 days of start if you don't already have one)

Required Skills:

• Risk Assessment & Compliance - Experience with RMF, NIST 800-53, NIST 800-171, and ATO processes.
• Vulnerability Management - Ability to resolve vulnerabilities and compliance findings identified during operations.
• Security Documentation - Experience in cybersecurity or information security implementation, integration, and verification documentation to support system assessment and verification.
• Continuous Monitoring - Knowledge of agency-specific continuous monitoring program requirements and how to maintain ongoing security awareness.
• Security Hardening - Experience with DISA STIGs, vulnerability scans, and access controls

Desired Skills:

• Space/Satellite/Sensor Domain Awareness - If you have prior experience working on a project or program that supported domains relating to space technolgies, satellites, sensors, or remote sensing - that's a definite plus
• Enterprise Security Services - Experience integrating security monitoring tools within an enterprise security environment
• Cloud Security - AWS/Azure GovCloud security configurations and compliance monitoring.
• Automated Patch Management - Familiarity with automated patching, regression testing, and secure deployment cycles.
• Cyber Risk Reporting - Experience in tracking and reporting security issues throughout the system lifecycle (requirements, design, testing, operations, etc.).
• Lab/Sandbox or R&D Environment - prior experience in such a setting is considered a plus

#CJ