Cyber Security Engineer

lufco; Aberdeen (WA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Paid Time Off

401K Contribution

Medical, Dental, and Vision Coverage

Job summary

LufCo in Aberdeen, MD is seeking a Cyber Security Engineer to support a DevSecOps team and advance the Army program accreditation, delivering secure software integration and mission-focused information assurance.

You will guide RMF processes, implement STIG controls on Linux and Windows, manage eMASS packages, and collaborate with engineers to embed security into CI/CD pipelines and cloud environments. Travel may be required.

Qualifications

• Experience managing RMF and SSP/ATO throughout the lifecycle.
• Experience applying RMF documentation.
• Understanding Cybersecurity concepts, IAVM, Airworthiness, Safety, and Net-worthiness.
• Experience applying the RMF package into the eMASS utility.
• Experience applying STIG controls in Linux and Windows platforms.
• Understanding cloud environments and the tools, processes, and utilities deployed within.
• Understanding the implementation and workflows of software engineering CI/CD pipelines.
• Understanding authentication and authorization architectures and tool-suites.
• Understanding basic system administration principles both in Linux and Windows environments.

Responsibilities

• Guide RMF process and maintain SSP/ATO throughout the lifecycle.
• Apply STIG controls on Linux and Windows platforms to harden systems.
• Support continuous accreditation within a DevSecOps team.
• Manage RMF package in the eMASS utility and cloud environments.
• Collaborate with software engineers to embed security into CI/CD pipelines.
• Provide system administration support for Linux and Windows environments.

Skills

RMF knowledge

SSP/ATO management

STIGs implementation

DevSecOps collaboration

Linux/Windows administration

Cloud security

CI/CD security

Authentication/Authorization concepts

Education

Bachelor's degree in a technical discipline

Tools

eMASS

Job description

Overview

Position Title: Cyber Security Engineer

Location: Aberdeen, MD

Reports To: Program Manager / Team Lead

Job Type: Full-time

Clearance Requirement: Active Secret is minimum requirement, with ability to obtain TS/SCI with Polygraph (able to process to TS/SCI and polygraph, US citizenship is a must)

Summary:

The Cyber Security engineer will support an established DevSecOps (DSO) team to establish and maintain the first-of-its-kind accreditation of Army programs. The Cyber Security engineer will face unique challenges and contribute ideas that bridge mission support and information assurance that fosters a collaborative environment for immediate mission impact. Further, the Cyber Security Engineer will require foundational knowledge of software integration and engineering disciplines.

Key Responsibilities:

• Manage RMF Process & Documentation: Guide and support Army programs through the DoD's Risk Management Framework (RMF) process, including managing and maintaining essential documentation such as the System Security Plan (SSP). This includes securing and maintaining an Authority to Operate (ATO) throughout its entire lifecycle.
• Implement Security Controls: Apply and enforce security controls by implementing Security Technical Implementation Guides (STIGs) on both Linux and Windows platforms to ensure system hardening and compliance.
• Support Continuous Accreditation: Work as part of a DevSecOps (DSO) team to support the continuous accreditation of Army programs. This includes applying your understanding of Cybersecurity concepts, IAVMs, and Net-worthiness to foster a collaborative environment and ensure ongoing compliance.
• Utilize eMASS & Cloud Environments: Manage the RMF package within the eMASS utility and support security efforts within cloud environments.
• Collaborate with Engineering Teams: Bridge the gap between cybersecurity and engineering disciplines by collaborating with software engineers and understanding CI/CD pipelines to integrate security measures seamlessly into the development lifecycle.
• Provide System Administration Support: Apply foundational knowledge of system administration principles to support and troubleshoot security-related issues in both Linux and Windows environments.

Qualifications

Education:

• Bachelors degree in a technical discipline.

Experience:

• 3+ years of experience as a cyber security engineer or in a role with related responsibilities.

Skills:

• Experience managing and/or supporting an effort through the DoD’s Risk Management Framework (RMF).
• Experience of managing a System Security Plan (SSP) and the associated Authority to Operator (ATO) throughout the entire lifecycle.
• Experience managing and/or supporting required RMF documentation.
• Experience or understanding of Cybersecurity concepts, Information Assurance Vulnerability Management (IAVM), Airworthiness, Safety, and Net-worthiness.
• Experience or understanding of applying the RMF package into the eMASS utility.
• Experience of applying STIG controls in Linux and Windows platforms.
• Understanding of cloud environments and the tools, processes, and utilities deployed within.
• Understanding the implementation and workflows of software engineering CI/CD pipelines.
• Understanding of authentication and authorization architectures and tool-suites.
• Understanding of basic system administration principles both in Linux and Windows environments.

Physical Requirements

• Ability to travel as required.
• Standard office environment with occasional requirements to visit client sites, labs, or field environments.

Why Join Us?

• Impactful Work: Contribute to critical national security initiatives and make a real difference in protecting our nation.
• Cutting-Edge Technology: Work with the latest advancements in SIGINT and related fields.
• Career Growth: Opportunities for professional development, training, and advancement within a growing company.
• Collaborative Environment: Join a team of highly skilled and supportive engineers who are passionate about their work.
• Comprehensive Benefits: Competitive salary, generous PTO, health/dental/vision insurance, 401K matching, tuition reimbursement.

Compensation and Benefits

• Competitive Pay: Salaries depend on labor category, years of experience, education, skills relevant to the position, and type of contract.
• Benefits: Including Paid Time Off; 401K Contribution and Employer Match Contributions; and Medical, Dental, and Vision Coverage.
• For the full list of LufCo Benefits, visit our website: https://www.lufburrow.com/careers

LufCo provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

LufCo Employees: This position qualifies for up to a Blue Award level referral bonus. For more information, visit the Employee Portal.