Cyber Assessment and Authorization Engineer (26-367)

Trace3; Colorado Springs (CO); On-site; USD 104,000 - 122,000; Full time

Benefits offered by this job

Comprehensive medical, dental and view

401(k) Employer Match

Training and development

Snacks/beverages in major offices

Collaborative culture

Work-life balance

Job summary

Trace3 seeks a Cyber Assessment and Authorization Engineer to analyze ACAS, SCC, and ConfigOS scans for continuous system authorization. You will collaborate with program teams and external stakeholders to assess vulnerabilities and generate responses for POA&Ms.

Ideal candidates have 3+ years of DoD cybersecurity experience, TS clearance, and RMF knowledge, with hands-on eMASS/Xacta experience. Trace3 offers a collaborative culture and growth opportunities.

Qualifications

• 3+ years of related DoD cyber engineering experience.
• DoD security credentials or related certifications are a plus.
• Strong RMF knowledge and reporting skills.

Responsibilities

• Analyze ACAS, SCC, and ConfigOS scans for continuous system authorization.
• Collaborate with program and external stakeholders to assess vulnerabilities.
• Support account management activities.
• Generate engineering responses for system POA&Ms.
• Assist in creation/maintenance of system packages in eMASS/Xacta.

Skills

ACAS

SCC

RMF (800-53)

DoDI 8500.2

eMASS/Xacta

3+ years exp

Top Secret clearance

Technical documentation

POA&M responses

Education

Bachelor's degree

Master's degree

Tools

eMASS

Xacta

Job description

Cyber Assessment and Authorization Engineer (26-367)

Who is Trace3?

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,200 people all over the United States. Our major field office locations include Denver, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Francisco.

Ready to discover the possibilities that live in technology?

Come Join Us!

Street-Smart-Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice - The “Stuff” it takes to be a Needle Mover

We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentallymapping outevery checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork - Humble, Hungry and Smart

We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.

JOB SUMMARY:

The Cyber A&A Engineer will utilize their Assessment & Authorization (A&A) background to analyze ACAS, SCC, and ConfigOS scans and controls for continuous system authorization. The role works in collaboration with the program and external stakeholders to assess system vulnerabilities, account management, generate engineering responses for system POA&Ms, and conduct risk analysis for Risk Acceptance Requests (RARs).

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

• Analyze ACAS, SCC, and ConfigOS scans and controls for continuous system authorization.
• Collaborate with the program and external stakeholders to assess system vulnerabilities.
• Support account management activities.
• Generate engineering responses for system POA&Ms.
• Assist in the creation and maintenance of system packages in eMASS/Xacta.

REQUIRED SKILLS AND EXPERIENCE:

• Generally has 3+ years of related experience.
• May have a post-secondary degree and/or certifications from a related discipline.
• DoD Final Top Secret clearance required at start.
• 8140 Level II or higher required at start.
• Solid cybersecurity engineering skills with working knowledge of cyber technologies, DoDI 8500.2, and Risk Management Framework (RMF) 800-53.
• Excellent technical documentation and verbal communication skills.
• Thorough understanding of ACAS and SCC outputs.
• Hands-on experience reviewing scan data, STIGs, and RMF controls.
• Experience with eMASS.
• Experience with the accreditation of Cross Domain Solutions (CDS).

Preferred Qualifications:

• Experience managing Cyber Tasking Orders (CTO), IAVMs, and POA&Ms.
• Experience working with third-party assessors and auditors.
• Experience performing self-assessments and analyzing STIGs.
• Experience with the management and auditing of accounts.
• Knowledge and understanding of patch and configuration management for complex and disparate enterprise systems.

EDUCATION: Bachelors with 3+ or Master with 1+ Years of Experience

CLEARANCE REQUIRMENT: Top Secret

SALARY RANGE: $ 104,000 to $ 122,400

PHYSICAL DEMANDS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this job, the employee is regularly required to:

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

WORK ENVIRONMENT:

This position is performed within a secure, classified workspace. Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

$104,000 - $122,400 USD

The Perks

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work-life balance and generous paid time off

Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email [e-mail].