Information System Security Officer / Cybersecurity Engineer

Description:
Onsite in Aberdeen Proving Ground, MD

Our client seeks an Information System Security Officer / Cybersecurity Engineer to guide DoD RMF policy, requirements, engineering, and accreditation activities. The role manages eMASS entries, translates security policies into technical configurations, and conducts vulnerability scanning and incident handling. The engineer will implement and enforce security controls, manage patching and scripting, and support network security technologies for mission systems.

Due to federal security clearance requirements, applicant must be a United States Citizen with an active Secret clearance. This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $70.00 to $75.00/hr. w2

Responsibilities:

• Guide development of Cybersecurity policy, requirements, engineering, and certification and accreditation aligned to DoD standards.
• Process systems through the Risk Management Framework and manage records in eMASS.
• Translate security policies and requirements into configuration and application implementation details for accreditation.
• Perform network and host vulnerability scans, analyze results, and document residual risk.
• Operate vulnerability scanners such as ACAS and Nessus.
• Manage patching through tools such as WSUS, Update Expert, SMS, and McAfee ESM.
• Administer and tune Firewalls/IPS, IDS, application firewalls, and web content filtering solutions.
• Develop and maintain scripts and tooling (Batch, Bash, NSIS, Python) to patch and secure network devices, operating systems, and appliances.
• Execute incident handling processes and analyze scan data for remediation.
• Implement and enforce security policies across the enterprise environment.

Experience Requirements:

• At least 4 years of relevant cybersecurity experience.
• Hands-on experience with DoD RMF, eMASS, and accreditation processes.
• Proficiency with vulnerability scanners such as ACAS and Nessus.
• Experience with patch management tools including WSUS, Update Expert, SMS, or McAfee ESM.
• Experience with Firewalls/IPS, IDS, application firewalls, and web content filtering.
• Experience scripting in Batch, Bash, NSIS, or Python for security and patch automation.
• Experience executing incident handling and analyzing scan outputs.
• Ability to implement and enforce enterprise security policies.
• Active Secret clearance.
• U.S. citizenship.
• CISSP certification.

Education Requirements:

• BA or BS in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field, or equivalent experience.
• Certified Information Systems Security Professional (CISSP).