CYBER SECURITY ENG III

Phoenix Defense, LLC.; Orlando (FL); On-site; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Cyber Security Engineer to join their dynamic team. This role is crucial in providing support to the cybersecurity team, focusing on designing and implementing security solutions that comply with Information Assurance and InfoSec standards. The ideal candidate will have hands-on experience with various operating systems and vulnerability scanning tools, along with strong communication skills and attention to detail. The position offers a fast-paced environment where you will collaborate with a talented team and contribute to the security of critical systems. If you are passionate about cybersecurity and thrive in a challenging environment, this opportunity is for you.

Qualifications

• 3+ years experience with Government systems and RMF.
• Hands-on experience with Windows, Linux, or VMware OS.

Responsibilities

• Design and implement security solutions for JLCCTC program.
• Identify and mitigate security risks throughout the program lifecycle.

Skills

Cybersecurity

Risk Management Framework (RMF)

Windows

Linux

VMware

Communication Skills

Attention to Detail

Teamwork

Education

Valid IAM II certification

DoD 8570/8140 certification

Tools

STIG Viewer

ACAS

Nessus

MS Office 365

Job description

The Cyber Security Engineer will provide critical support to the Joint Land Component Constructive Training Capability (JLCCTC) Cybersecurity team, assisting the Information Systems Security Manager (ISSM) across all cybersecurity domains. This role involves designing and implementing security engineering solutions to ensure compliance with Information Assurance (IA) and Information Security (InfoSec) standards throughout the lifecycle of the program. The selected candidate will be responsible for identifying and mitigating system security threats and risks, validating security requirements, and supporting the development of Risk Management Framework (RMF) assessment and authorization documentation. Additional duties include ensuring the secure operation and maintenance of systems, performing Assessments & Authorizations (A&As) for DoD systems, and working in a fast-paced environment with multiple releases and system baselines.

ESSENTIAL DUTIES / RESPONSIBILITIES:

1. Collaborate with the security team to address assigned cybersecurity aspects of the JLCCTC program.
2. Design, implement, and assess security solutions in accordance with IA and InfoSec principles.
3. Identify, assess, and mitigate security risks throughout the program lifecycle.
4. Validate system security requirements and provide input for RMF documentation and processes.
5. Support the secure operation and ongoing maintenance of systems.
6. Collaborate on A&As on DoD systems and ensure compliance with security standards.
7. Work effectively in a fast-paced environment with overlapping releases and multiple system baselines.

MINIMUM QUALIFICATIONS:

1. Three or more years of working on a Government system and Risk Management Framework.
2. Strong written and verbal communication skills.
3. Ability to work with multiple systems in a dynamic and high-demand environment.
4. Hands-on experience with either Windows, Linux, or VMware operating systems.
5. Familiarity with vulnerability scanning tools such as STIG Viewer, ACAS, and Nessus.
6. Knowledge of DISA STIGs and Information Assurance Vulnerability Management (IAVM) processes.
7. Valid IAM II or other relevant DoD 8570/8140 certification (IAT II/IAM II) or the ability to obtain within six months of hire.
8. Ability to travel to both domestic and overseas (OCONUS) sites.
9. Experience leading Cybersecurity Working Groups.
10. Ability to acquire TS/SCI security clearance.
11. Detailed oriented – focus on accuracy of records, data, and reports.
12. Ability to work well in a team environment.
13. Significant experience in MS Office 365 Products (SharePoint, Word, Excel, PowerPoint and Access).

Preferred Qualifications:

1. Experience with constructive simulation training environments.
2. Experience working with RMF/NIST standards and implementing their requirements.
3. Proven ability to manage processes independently with minimal direction.
4. Ability to analyze and act on findings from vulnerability scanning tools (e.g., Nessus, SCAP).