Cyber Engineer: DoD Linux & Security Assessments (Hybrid)

OneZero Solutions; Alexandria (VA); Hybride; USD 90 000 - 140 000; Plein temps

Avantages offerts par ce poste

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with company matching

Paid time off and holidays

Employee referral program

Educational assistance

Résumé du poste

OneZero Solutions, LLC seeks a security assessment professional in the Alexandria, VA area. The role focuses on Linux environments and compliance with DoD security engineering standards, delivering assessments, reports, and remediation guidance.

Responsibilities include conducting tests, preparing deliverables, and presenting findings. Candidates should have DoD related experience and familiarity with STIGs, CORA, CCRI, and tools like Nessus, Burp Suite, and RedSeal.

Qualifications

• 2–3 years of relevant experience.
• Proficiency in Linux operating systems (primary environment).
• Working knowledge of DoD STIGs.
• Familiarity with DoD CND OPORDs and TASKORDs.
• Familiarity with DoD CCRI/CORA assessment areas including Technical, CND, and Contributing Factors.
• Experience with common assessment tools such as STIG Viewer, ACAS/Nessus, WebInspect, Burp Suite, and RedSeal.

Responsabilités

• Plan and conduct technology assessments in support of DoD CORA and CCRI efforts, focusing on Linux environments.
• Perform interviews, examinations, and technical testing to evaluate compliance with DoD security engineering standards and policy requirements.
• Assist in preparing assessment deliverables, including Security Control Assessment Reports and Security Risk Assessments.
• Prepare and present briefings and reports on inspection results, including remediation actions needed to reach compliance.

Connaissances

Linux

DoD STIGs

DoD CORA/CORA assessments

DoD CCRI/CORA areas

Assessment tools usage

Outils

STIG Viewer

ACAS/Nessus

WebInspect

Burp Suite

RedSeal

Description du poste

OneZero Solutions, LLC seeks a security assessment professional in the Alexandria, VA area. The role focuses on Linux environments and compliance with DoD security engineering standards, delivering assessments, reports, and remediation guidance.

Responsibilities include conducting tests, preparing deliverables, and presenting findings. Candidates should have DoD related experience and familiarity with STIGs, CORA, CCRI, and tools like Nessus, Burp Suite, and RedSeal.