Cybersecurity Engineer

The Judge Group is currently seeking a Cybersecurity Engineer with an active secret clearance and a Security+ to support a military customer. OCONUS travel is expected for this position in the future.

The Cybersecurity Engineer will be responsible for providing technical expertise and cybersecurity support for a Foreign Military Sales (FMS) Air Operations Center (AOC) program. Under direction of the Cybersecurity Lead, the Cybersecurity Engineer will support the incorporation of cybersecurity considerations into the system design as well as Risk Management Framework (RMF) Certification and Accreditation (C&A) and Assessment and Authorization (A&A) activities.

Responsibilities:

• Perform RMF A&A activities including implementing, and assessing security controls and validating security control implementation.
• Under the direction of the Cybersecurity Lead, develop systems security artifacts such as risk assessment reports, system security plans, policies, and procedures, etc.
• Provide implementation design, artifacts, information, diagrams, and assessment procedures.
• Support the creation and population of an Integrated Inventory Workbook.
• Provide system description, design, and architecture documents in support of identification, development, and depiction of Cyber General Support System (CGSS) instantiation and AOC system boundaries.
• In coordination with the customer, develop and finalize risk acceptances and Plan of Action and Milestones (POA&M's) generated from assessment and testing of CGSS and AOC Systems.
• Perform analysis and evaluation to design, implement, test, and field secure systems, networks, and architectures.
• Ensure compliance with Information Assurance (IA) standards and regulations.
• Conduct vulnerability scans and mitigate deficiencies.
• Provide guidance on approved hardware and software components.
• Perform continuous monitoring activities, weekly scan/patch/scan activities, monthly SCAP scans, quarterly Security Technical Implementation Guide (STIG) reviews, and annual reviews/updates.
• Provide support to training developers regarding cybersecurity topics such as monitoring AOC Enterprise architecture, implementing corrective actions against cyber threat, performing RMF operations and maintenance, and maintaining the defensive cybersecurity system requirements.
• Perform other duties as assigned.

Requirements:

• Active Secret security clearance
• Bachelor's degree in Computer Science, Information Technology, or related field
• Minimum three (3) years of experience working in a cybersecurity role for DoD/Military programs.
• Experience with Command and Control (C2) systems for the US Air Force.
• Professional certifications in Information Security (CISSP, CISM, Security+).
• Extensive applied knowledge of cyber security operations functions, in areas such as incident response, security monitoring, threat and vulnerability, etc.
• Knowledgeable with various security infrastructure tools such as firewalls, intrusion prevention and detection systems, proxy servers, email controls, anonymizing technology, data loss prevention, vulnerability scanners, Endpoint Detection and Response (EDR) and SIEM (Splunk).
• Experience in vulnerability assessment and scanning tools, including Nexpose and assessing system compliance with security controls.
• Experience with contributing to the development of security documentation.
• Exceptional interpersonal, analytical, technical, communication, organizational, and decision-making skills
• Willing and able to travel CONUS and OCONUS up to 25%.