Cybersecurity Engineer Mid - Continuous Monitoring

Description

The company provides consulting, technology solutions and support services to U.S. government, defense and intelligence agencies.

This role supports a cybersecurity risk management and assessment program for a DoD customer.

Responsibilities

• Use Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP and ESS to test, confirm and watch enterprise and system-level security controls.
• Build and keep up the ConMon Strategy that supports the A&A mission.
• Write and update the ConMon SOP, setting out oversight and monitoring needs for IT systems across their whole lifecycle.
• Run ongoing security control assessments for every IS under the organization's responsibility.
• Carry out automated and manual monitoring, and produce weekly security control status reports from live tool data.
• Make sure ConMon controls are correctly put in place within RMF packages in eMASS.
• Run continuous assessments that meet industry auditor standards, watching for security gaps, vulnerabilities and threats.
• Report system risk status through the DISA-approved reporting tool.
• Keep the ConMon Dashboard current, covering compliance, POA&M status, CMRS visibility, asset management, FISMA reviews and annual validations.
• Follow automated and manual security controls, flagging assessments and validations that are overdue.
• Work with system, ACAS and HBSS administrators to fix credentialing and data problems.
• Supply real-time IS security status metrics based on the ConMon Strategy and SOP.
• Inform the Government within 60 minutes of any change in security posture that harms a system.

Requirements

• Hold US citizenship.
• Hold an active DoD Top Secret clearance and keep it current.
• Hold a DoD 8570 IA Technical (IAT) or IAM Level II certification.
• Have a bachelor's degree, or equivalent professional experience; an IT-related degree is preferred.
• Have 5 years of overall experience in cybersecurity, systems engineering or a similar technical field.
• Be proficient in one or more of these tools: Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP and HBSS.
• Understand the RMF process, NIST SP 800-37, NIST SP 800-53 and CNSSI 1253.
• Have experience building, rolling out and running a continuous monitoring program at a large organization.
• Be skilled in security architecture, system hardening, vulnerability management and intrusion detection and prevention.
• Communicate well in writing and when presenting.
• Provide strong customer service.

Conditions

US citizenship and an active DoD Top Secret clearance are both required.

Work full-time on-site at one of these locations: Ft. Meade, MD; Chambersburg, PA; or Alexandria, VA.

The projected salary is $70,000+ per year. The final figure depends on years of relevant experience, clearance level, certifications, technical skills, contract requirements and overall qualifications.

Benefits

• 26 days of paid leave covering vacation, sick time, personal time and holidays, used however you choose.
• Performance bonuses tied to your individual contributions and company-wide results.
• 401(k) with a 3% employer match that vests immediately.
• Company-paid life insurance up to $300K, with optional extra cover for you and your dependents.
• Several medical plans, plus dental, vision, FSA and HSA options.
• 15 days of fully paid parental leave for new parents.
• Military differential pay that covers the pay gap for employees on active duty.
• Paid training and certifications, tuition reimbursement, and the tools and technology needed for the job.
• If the company is sold, the CEO has committed to return 80% of net proceeds to employees.