Cybersecurity Engineer (Connection Approval/PPSM, Compliance, Standards and Strategy Support)

Description

The company provides consulting, technology and professional services to U.S. government, defense and intelligence agencies, helping major agencies work through complex problems.

The team is hiring a cybersecurity engineer to handle connection approval (PPSM) and agency-level compliance with IT and cyber standards, plus strategy support for a DoD customer.

Responsibilities

• Staff the PPSM support phone line and mailbox, and answer inquiries and registration requests for ports, protocols and services.
• Manage the PPSM Registry, including user accounts, data entry, and exports in special formats for external database administrators.
• Define support requirements for data sharing with other repositories.
• Prepare each PPSM CCB/TAG meeting, including logistics, materials and documents, and send the read-ahead to the PPSM community beforehand.
• Give subject matter input at meetings and conferences, and record it in an AAR or MFR.
• Design and implement PPSM system security controls and metrics, and send monthly performance metrics to the government.
• Track communications and suspense tasks.
• Check the quality of reports such as DSAWG slides, TAG/CCB minutes and FA reports.
• Operate PPSM phone and email systems on SIPRNet and NIPRNet according to SOPs.
• Keep PPSM websites current, publish official documents and reports, and distribute TRPs, TAG comments, CCB vote results and other documents as directed.
• Build graphics for PPSM meetings and presentations, and write technical papers on PPSM and cybersecurity topics.
• Keep PPSM leadership and stakeholders informed on deliverables.
• Process non-DoD PPSM registrations through the Federal DMZ and NIPRNet gateways.
• Find and build automation for PPSM processes.
• Apply DoD assessment resources and policies to help develop DISA cybersecurity directives and strategies.
• Maintain cybersecurity policy content on DISA's SPO site and other platforms, and manage repositories of policy, governance and reference materials.
• Write and maintain standard procedures for drafting and finalizing policy documents.
• Produce compliance reports with DISA and DoD tools, monitor compliance activity, flag anomalies or trends, and record lessons learned.
• Run working groups that address stakeholder feedback and comment matrices, and close assigned action items from meetings and groups.
• Draft, revise and finalize up to 10 policy documents a year, each up to 50 pages, including manuals, directives and CONOPS.
• Prepare up to 20 presentations, briefs and reports a year on cybersecurity and cyber defense policy.
• Attend weekly meetings on cybersecurity governance, policy and compliance.
• Put in place policy and process updates issued by USCYBERCOM, DoD CIO and DISA.

Requirements

• Bachelor's degree, preferably in an IT-related field, or equivalent experience.
• DoD 8570 IAT Level II certification.
• Two years in cybersecurity policy development roles.
• Five years overall in cybersecurity or network security.
• Demonstrated network security experience with ports, protocols, firewalls and boundary protection.
• Understanding of network architectures, LAN/WAN, TCP/IP, routing and switching.
• Understanding of 8551.01, DISA security policies and compliance monitoring.
• Understanding of Windows, Linux and Unix environments.
• Strong grasp of TCP/IP, DNS, firewalls, NAT, VPNs and routing protocols.
• Hands-on vulnerability scanning experience with tools such as Nessus, Qualys or Rapid7, including tuning them for performance.
• Advanced knowledge of CVEs, CVSS scoring, and resources such as NVD or Exploit DB.
• Clear written and verbal communication for technical documentation and stakeholder engagement.
• Experience drafting, reviewing and interpreting security policies, procedures, standards, CONOPS and governance documents.
• Proven ability to prepare technical documentation, strategy briefings and governance materials for senior DoD boards.
• Working knowledge of knowledge management practices using SharePoint, Confluence or wikis.
• Preferred: advanced proficiency in PPSM Registry management, eMASS and DISA DMZ Whitelist processes.

Conditions

Must live within a commutable distance of Ft. Meade, MD to work a full-time onsite schedule.

U.S. citizenship is required.

Active DoD Top Secret clearance is required and must be maintained.

Projected salary is $90,000+ annually. Final pay depends on years of relevant experience, active clearance level, certifications, technical skillset, contract requirements and overall qualifications.

Benefits

• 26 days of paid leave covering vacation, sick, personal time and holidays, used as you choose.
• Performance bonuses based on individual and company-wide results.
• 401(k) with a 3% company match, vested immediately.
• Company-paid life insurance up to $300K, with optional additional coverage for you and your dependents.
• Multiple medical plans, dental, vision, FSA and HSA options.
• 15 days of fully paid parental leave for new parents.
• Military differential pay for employees on active duty.
• Paid training and certifications, tuition reimbursement, and the tools and technology needed for the job.
• If the company is sold, the CEO has committed to returning 80% of net proceeds to employees.