Cyber Assessment Engineer

TekStream Solutions; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

TekStream Solutions seeks a Senior Cyber Assessment Engineer to lead DHS C-UAS cyber assessments in the Chantilly/Crystal City or DC DHS campus. You will provide advanced IA solutions to government and commercial clients and manage the full cyber assessment lifecycle.

Qualified candidates bring 10+ years IT with 4+ in IA/security, CISSP, and ability to brief senior federal leaders. Active clearance or equivalent background investigation is required.

Qualifications

• Must be a U.S. Citizen.
• Active DoD SECRET Clearance or DHS background investigation status.
• 10+ years IT experience with 4+ years in information assurance and IT security.
• Certified Information Systems Security Professional (CISSP).
• Motivated self-starter with strong writing and analytical skills.

Responsibilities

• Provide technical program management for cyber assessments.
• Lead and participate in cyber assessments of C-UAS.
• Manage hardware assessment, network analysis, OSINT research, and EM spectrum analysis.
• Develop Cyber Assessment Reports, deliverables, and official correspondence.
• Oversee full lifecycle Cyber Assessment deliverables and ROIs (TRR, POA&Ms, etc.).
• Brief senior leadership on reports and remediation.
• Develop security policy white papers and briefings.
• Research latest IT security trends.

Skills

Cyber risk assessment

Information assurance (IA)

Project management

Written communications

Verbal communications

RMF/DIACAP/DoD frameworks

NIST 800-53

Stig/CAP tools

Education

Bachelor's Degree (BS/BA)

MS in Information Systems or related field

Tools

Nessus

CrowdStrike

Splunk SIEM

SCAP

STIG Viewer

SCC

Job description

Our client is seeking a Senior Cyber Assessment Engineer to lead the Cybersecurity Assessments of Counter-Unmanned Aircraft Systems (C-UAS) for the Department of Homeland Security (DHS). As a team member on Mission Focus Tool’s Cyber Architecture & Advisory Services you will provide advanced information assurance (IA) solutions to government and commercial clients.

This position can sit in Chantilly, VA, Crystal City Office, or DHS St. Elizabeth’s Campus, Washington DC.

Responsibilities

Primary job responsibilities:

• Provide technical program management for cyber physical assessments
• Lead and participate in Cyber assessments of Counter-Unmanned Aircraft Systems (C-UAS)
• Manage Hardware assessment, network communication analysis, Open Source Intelligence (OSINT) Research, Electromagnetic Spectrum performance analysis
• Manage the development of Cyber Assessment Reports, associated deliverables, and official correspondence
• Manage full lifecycle Cyber Assessment Process deliverables: Test Plans, Test Readiness Reviews (TRR), Cyber Assessment Reports, Cyber Assessment Policies and Procedures, vulnerability analysis, and risk management, and Plans of Action & Milestones (POA&Ms).
• Serve as trusted partner and Subject Matter Expert for Senior Federal Program Managers.
• Brief Senior Federal Executive Leadership on Cyber Assessment Reports and recommended remediation.
• Develop and deliver security policy white papers and briefings
• Provide research and analysis of latest information technology security trends

Additional job responsibilities:

• Evaluate and analyze leading edge security technologies to be implemented to improve the organization’s security posture.
• Work with research and development (R&D) organizations to define requirements to design and develop leading-edge security solutions.
• Collaborate with fellow Cyber Security Practice Team Members both locally and across the Cyber Security Practice in the full-lifecycle development and delivery of security technology solutions.
• Actively contribute to Cyber process improvement initiatives
• Actively participate in leading edge cyber security conferences, working groups and training
• Actively participate in Cyber Security Practice “Solving the Toughest Security Problems” expert group

Key Qualifications

• Must be a U.S. Citizen
• Active DoD SECRET Clearance or DHS “Enter on Duty” (EOD) or “Full Suitability Approval” (FSA) Background Investigation status.
• 10+ years IT experience with at least 4+ years of that experience in information assurance and IT security
• Bachelors Degree (BS/BA)
• Certified Information Systems Professional (CISSP)
• Motivated self-starter who requires minimal supervision and oversight
• Strong organizational, and time management skills, and the ability to meet tight deadlines
• Strong Analytical and Writing skills with history of producing quality technical documentation
• Proven experience working in collaborative sessions demonstrating strong verbal and written communication skills along with tactful negotiation skills
• Experience and expertise in Cyber Physical Systems Assessment, Project Management, Systems and Security Engineering, Cyber Security, Requirements Elicitation, Customer Service & Delivery
• Proven knowledge of NIST 800-53 rev3 Operation, Technical, and Managerial Controls, IT, IA and physical security concepts and principles
• Experience with Windows and Linux configuration STIG hardening, DISA Security Technical Implementation Guides (STIGs), implementation SCAP Compliance Checker (SCC) and STIG Viewer.
• Expertise with Plans of Actions and Milestones (POA&M) management
• Subject Matter Expertise of the Risk Management Framework (RMF)

Preferred Qualifications

• Current DHS Security Suitability
• M.S. in Information Systems or related field
• Experience with Electromagnetic Spectrum assessment, Signal Characterization, Electronic Warfare and countermeasures.
• Experience with C-UAS, Aviation, Maritime, and/or Border operations and systems
• Experience with Customs and Border Protection (CBP) to include: U.S. Border Patrol (USBP), Support to Federal, State, Local, and Tribal Authorities, Border Operations, Operational Intelligence; Intelligence, Surveillance, and Reconnaissance (ISR) systems; Processing, Exploitation, and
• Dissemination (PED), and law enforcement support
• Experience with IT Security Engineering in support of systems development, interface, and/or architecture requirements and concepts for C-UAS, Aviation, Maritime, and/or Border Protection solution elements; and
• Experience with DHS MD 4300A Security Controls and Security Authorization Process.
• Expertise in evaluating system and application security threats and vulnerabilities
• Experience with Nessus, CrowdStrike, Splunk SIEM, SCAP, End Point Protection tools, and other vulnerability detection tools
• Experience with reviewing Static Application Security (SAST) Reports
• Experience with Cloud Architectural Concepts & Design Requirements.
• Experience with Cloud Data Security
• Experience with Cloud Platform & Infrastructure Security
• Experience with Cloud Application Security
• Experience with Cloud Environment Operations
• Experience with Mobile Application Security
• Consulting environment experience
• Military veteran with relevant IT and computer security experience will be considered a plus.