Cyber Security Engineer

System One; Baltimore (MD); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Dental

Vision

Life insurance

Flexible spending accounts

Job summary

System One is seeking a Cyber Security Engineer in Baltimore to own RMF artifacts, manage POA&Ms in eMASS, and coordinate risk remediation with system owners. You will ensure compliance with NIST SP 800-53 and DoD STIGs, while integrating vulnerability management into CI/CD processes.

You will collaborate with Cloud Architects, System Engineers, and Admins to define remediation timelines, support AWS security operations, and drive security improvements across the enterprise.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field.

Responsibilities

• Serve as the primary custodian of the RMF and authorization artifacts.
• Prepare, author, and maintain RMF artifacts including SSP, SAR, and Continuous Monitoring Strategy.
• Lead curation and validation of evidence for NIST 800-53 Rev.4 to Rev.5 transitions.
• Author and track Plans of Action and Milestones (POA&Ms) in eMASS and ticketing workflows.
• Partner with System Owners and engineers to define remediation timelines and resource needs.
• Review non-compliance closures and remediation evidence for AO approval.
• Assess impact for directed cyber tasks on the cARMY AWS architecture and workloads.
• Review STIGs/SRGs using STIG Viewer and automated tooling.
• Support GitLab CI/CD by integrating vulnerability analysis into Agile workflows.
• Oversee continuous monitoring and vulnerability scanning with ACAS and related tools.
• Maintain cybersecurity dashboards, POA&Ms aging, and security tickets.

Skills

RMF

NIST 800-53

AWS Cloud

eMASS

STIGs

DevSecOps

Vulnerability Mgmt

POA&M management

GitLab CI/CD

Cloud security monitoring

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field

Tools

ACAS

STIG Viewer

CloudWatch

CloudTrail

EvaluateSTIG

Power BI

ServiceNow

GitLab CI/CD

Job description

Job Title: Cyber Security Engineer

Responsibilities

• Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
• Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
• Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
• Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
• Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
• Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
• Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
• Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
• Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
• Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
• Maintain cybersecurity dashboards, track POA&Ms aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.

Requirements

• Active Secret security clearance.
• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field.
• 5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
• Active DoDI 8140 qualification.
• Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
• Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.

Preferred Qualifications:

• Experience supporting Army or DoD programs
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
• Familiarity with Agile frameworks such as SAFe and with incremental delivery

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#LI-KA1
#M1
Ref: #851-Rockville-S1