Job Requirements
Remote
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Client is seeking a highly qualified Senior Cyber Engineer to support an Army program focused on modernizing an Army platform infrastructure through secure, scalable, and cloud-enabled systems. The Senior Cyber Engineer will serve as a principal cybersecurity advisor to the Information System Security Manager (ISSM), System Owners, and technical engineering teams.
Responsibilities:
• Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
• Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
• Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
• Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
• Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
• Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
• Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
• Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
• Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.
Required Qualifications:
• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.
Preferred Qualifications:
• Experience supporting Army or DoD programs
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.
Responsibilities:
• Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
• Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
• Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
• Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
• Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
• Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
• Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
• Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
• Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&M aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.
Required Qualifications:
• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.
Preferred Qualifications:
• Experience supporting Army or DoD programs
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with Agile frameworks such as SAFe and with incremental delivery cycles.
group id: 10382761