Remote Cyber Security Engineer

Summary

The Cybersecurity Engineer will conduct reviews of cybersecurity policies, support vulnerability management programs, develop hardware and software evaluation capabilities, provide detailed security reports, lead in the development of information system security policy and standards, and maintain communication with project-level stakeholders. The position requires U.S. citizenship, an active DoD Secret Clearance, a Bachelor’s degree or higher in an Information Technology field or equivalent work experience, and one of several specified IAT Level II Security Certifications.

Requirements

• U.S. citizenship
• Active DoD Secret Clearance
• Bachelor’s degree or higher in an Information Technology field or equivalent work experience
• Possession of one of these IAT Level II Security Certifications: Cisco Certified Network Associate - Security (CCNA Security), CompTIA Cybersecurity Analyst (CySA+), Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), CompTIA Security+ (SEC+ CE), Certified Network Defender (CND), ISC2 Systems Security Certified Practitioner (SSCP)

Responsibilities

• Conduct reviews of NIST, OMB, DHS, DoD, FISMA policies, mandates, and vendor publications related to enterprise technologies and recommend changes to organizational policy and procedures affected by new guidance
• Support authoritative order review, research, impact assessment, distribution, compliance determination, tracking, and reporting
• Monitor identified vulnerabilities throughout their lifecycle from discovery to mitigation using ACAS, HBSS, STIG Viewer or other industry tools
• Support the Plan of Actions and Milestones (POA&M) program to ensure customer systems have accurately and fully provided information for POA&M activities
• Support the collection and use of data for our critical Information Assurance Vulnerability Management (IAVM) Program using various security tools (i.e. ACAS, HBSS, ADUC, Burp Suite, etc)
• Develop and implement hardware and software evaluation (sandboxing) capability and procedures prior to introduction to network computing environment
• Support security impact analysis and risk management decision cycle
• Maintain a thorough understanding of computer hardware, network devices, components, security appliances etc. to enable review of vulnerabilities and validate developer mitigation courses of action
• Provide detailed security-related reports including data, analyses, and conclusions upon completion of tests, scans, and assessments, including mitigations and, if indicated, appropriate escalation of identified risks and vulnerabilities
• Lead and/or participate in the development of information system security policy and standards, including writing guidelines, standards, procedures, and other technical documentation (technical roadmaps, project plans, etc.)
• Maintain communication with project-level stakeholders and manage project scope and expectation to ensure requirements are understood, enabling swift delivery

Benefits

• Competitive salary
• Medical/dental/vision insurance
• Life insurance
• Paid time off
• Paid holidays
• 401(k) retirement plan with company match
• Opportunities for professional growth
• Cell phone discounts