ConMon Security Engineer

Telos Corp.; Tysons (VA); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental

Vision

Tuition reimbursement

401k

Job summary

Telos Corporation in Tysons, VA is seeking a highly skilled ConMon Security Engineer to modernize and operate our Continuous Monitoring program for government-grade systems. You will bridge operational compliance with scalable automation, leveraging your ConMon, ISSO experience and eMass expertise to maintain Authorization to Operate.

The role emphasizes automating data collection, vulnerability parsing, and reporting workflows, coordinating with system owners and stakeholders, and advancing

Qualifications

• Bachelor's degree in computer science, engineering, information assurance, or related discipline with at least 5 years in IT (degree may be substituted).
• US Citizenship with an active Top Secret (TS) Clearance (Required).
• DoD 8140 compliant or certifiable (Required).
• Extensive professional experience managing the full lifecycle of Continuous Monitoring (ConMon) programs and complex cybersecurity operations for enterprise systems.
• Subject matter expertise in eMass including advanced system administration, package management, and reporting functions.
• Strong understanding of cloud security architecture and best practices.
• Proven ability to design and implement automated security solutions or scripts (e.g., Python, SQL) to modernize data collection, vulnerability parsing, and reporting workflows.
• Capability to institutionalize standardized security procedures and compliance artifacts at an organizational scale.

Responsibilities

• Execute the end-to-end monthly government submission process, ensuring all required security documentation is accurate and delivered on schedule.
• Manage and maintain system records within eMass, serving as the primary subject matter expert for data entry, reporting, and workflow management.
• Perform comprehensive parsing and analysis of vulnerability scan files (e.g., Tenable, Qualys), comparing results against historical data to identify emerging risks.
• Own the Plan of Action & Milestones (POA&M) lifecycle, including weekly tracking, stakeholder follow-up, and driving all identified vulnerabilities to remediation.
• Coordinate the collection of compliance evidence (e.g., facility access reviews, audit logs) by building strong professional relationships with system owners and stakeholders.
• We leverage automation as an enabler to modernize and scale our security operations, transforming manual data collection into streamlined, repeatable workflows.
• Spearhead the design and implementation of automated workflows to streamline recurring evidence collection and reporting tasks.
• Orchestrate the development of scripts and utilization of advanced tools to modernize the tracking of ConMon activities and data workflows.
• Conduct gap analyses on existing processes to modernize areas of improvement, particularly concerning the transition to updated regulatory frameworks such as NIST SP 800-53 Rev 5.
• Standardize security procedures and compliance artifacts at an organizational scale to ensure consistency across all enclaves.
• Author justification language and remediation instructions to provide engineering teams with clear, actionable guidance.
• Build and cultivate strong professional relationships with ConMon owners to ensure alignment on security standards and evidence requirements.
• Act as a trusted advisor to stakeholders, proactively negotiating acceptable evidence formats that can be standardized across all organizational ConMon programs.
• Communicate compliance status and remediation expectations clearly to technical and non-technical stakeholders to ensure seamless operational continuity.

Skills

Python

SQL

Automation

Threat analysis

Stakeholder management

Education

Bachelor's degree in CS/Engineering/Info Assurance

Tools

eMass

Tenable

Qualys

Job description

Job Title

ConMon Security Engineer

Job Description

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. The annual salary range for this position is $135,000 - $155,000. Our employees enjoy more than just a great work environment!

• generous paid time off
• medical
• dental
• vision
• tuition reimbursement
• 401k

This position will be based at Tysons, VA.

Telos is seeking a highly skilled Cybersecurity Professional to modernize and operate our Continuous Monitoring (ConMon) program for our customers. This role is designed for a strategic thinker capable of bridging the gap between operational compliance and scalable program development. The ideal candidate will leverage an extensive background as a ConMon practitioner, an Information System Security Officer (ISSO) and subject matter expertise in eMass to ensure mission-critical systems maintain their Authorization to Operate (ATO). We are looking for a professional who not only executes daily security mandates but also possesses the vision to automate complex workflows and standardize security procedures at an organizational scale.

Responsibilities:

Continuous Monitoring Operations

• Execute the end-to-end monthly government submission process, ensuring all required security documentation is accurate and delivered on schedule.
• Manage and maintain system records within eMass, serving as the primary subject matter expert for data entry, reporting, and workflow management.
• Perform comprehensive parsing and analysis of vulnerability scan files (e.g., Tenable, Qualys), comparing results against historical data to identify emerging risks.
• Own the Plan of Action & Milestones (POA&M) lifecycle, including weekly tracking, stakeholder follow-up, and driving all identified vulnerabilities to remediation.
• Coordinate the collection of compliance evidence (e.g., facility access reviews, audit logs) by building strong professional relationships with system owners and stakeholders.

Automation-Driven Operational Excellence

• We leverage automation as an enabler to modernize and scale our security operations, transforming manual data collection into streamlined, repeatable workflows.
• Spearhead the design and implementation of automated workflows to streamline recurring evidence collection and reporting tasks.
• Orchestrate the development of scripts and utilization of advanced tools to modernize the tracking of ConMon activities and data workflows.
• Conduct gap analyses on existing processes to modernize areas of improvement, particularly concerning the transition to updated regulatory frameworks such as NIST SP 800-53 Rev 5.
• Standardize security procedures and compliance artifacts at an organizational scale to ensure consistency across all enclaves.
• Author justification language and remediation instructions to provide engineering teams with clear, actionable guidance.

Stakeholder & Relationship Management

• Build and cultivate strong professional relationships with ConMon owners to ensure alignment on security standards and evidence requirements.
• Act as a trusted advisor to stakeholders, proactively negotiating acceptable evidence formats that can be standardized across all organizational ConMon programs.
• Communicate compliance status and remediation expectations clearly to technical and non-technical stakeholders to ensure seamless operational continuity.

Job Requirements

Qualifications:

• Bachelor's degree in computer science, engineering, information assurance, or a related discipline and has at least 5 or more years of experience in an information technology role. Additional experience may be substituted for a degree.
• US Citizenship with an active Top Secret (TS) Clearance (Required).
• Currently DoD 8140 compliant or possessing the necessary certifications for immediate certification (Required).
• Extensive professional experience managing the full lifecycle of Continuous Monitoring (ConMon) programs and complex cybersecurity operations for enterprise systems.
• Subject matter expertise in eMass, including advanced system administration, package management, and reporting functions.
• Strong understanding of cloud security architecture and best practices.
• Proven ability to design and implement automated security solutions or scripts (e.g., Python, SQL) to modernize data collection, vulnerability parsing, and reporting workflows.
• Capability to institutionalize standardized security procedures and compliance artifacts at an organizational scale.
• Exceptional stakeholder management skills, with the ability to cultivate relationships with system owners, negotiate evidence requirements, and provide authoritative guidance.
• Strong analytical capability to translate complex vulnerability data into clear, actionable remediation plans for engineering teams.
• High level of operational rigor, with demonstrated success in managing audit-ready documentation and complex project lifecycles.

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States. Telos offers excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future.

Telos Corporation and its subsidiaries are committed to equal opportunity for all, without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, veteran status, disability, genetic information, or any other protected characteristic. Telos Corporation will make reasonable accommodations for known physical or mental limitations of otherwise qualified employees and applicants with disabilities unless the accommodation would impose an undue hardship on the operation of our business. If you are interested in applying for an employment opportunity and feel you need a reasonable accommodation pursuant to the ADA, please contact us at 1-800-283-1911. If you require relay service assistance, please click on the following link to review information on your state's relay service: https://www.fcc.gov/accessibility.

Telos Corporation is an EEO/AA employer.

Job Type

Full-Time

Location

Tysons, VA 22102 US (Primary)

Telos offers an excellent compensation packages including salary commensurate with experience and benefits to meet your needs for today and the future. Telos and its subsidiaries are an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.