Cyber Security Engineer

Abacus Technology Corporation; Bedford (MA); On-site; USD 110,000 - 160,000; Full time

Job summary

Abacus Technology Corporation seeks a Cyber Security Engineer to support the C3I&N Directorate at Hanscom AFB in a full-time role. You will plan, analyze, implement, and sustain information systems security programs aligned with DoD policies and RMF requirements.

You will lead A&A activities, assess security artifacts, and ensure proper system access controls, incident response readiness, and continuity planning. US Citizenship and a current Secret clearance are required; EOEs apply.

Qualifications

• 3+ years in cyber security or information assurance, including DoD experience.
• Bachelor’s degree in a related field; additional years may substitute for degree.
• Must hold one of CAP, CASP+/SecurityX, CISM, CISSP, GSLC, CCISO.

Responsibilities

• Ensure confidentiality, integrity, and availability of systems, networks, and data.
• Support A&A efforts per RMF policies and DoD Air Force guidance.
• Recommend security policies and procedures to prevent unauthorized access.
• Conduct risk and vulnerability assessments of information systems.
• Promote security awareness and sound security principles across the organization.
• Perform security evaluations, audits, and reviews, and develop contingency plans.

Skills

CAP

CISM

CISSP

GSLC

CCISO

RMF

Vulnerability scanning

Network access control

Acquisition experience

Communications skills

Education

Bachelor's degree in a related field

Tools

A&A tools

Job description

Overview

Abacus Technology is seeking a Cyber Security Engineer to provide security support for the Command, Control, Communication, Intelligence and Networks (C3I&N) Directorate at Hanscom AFB. This is a full-time position.

Responsibilities

• Ensure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools.
• Support the system/application Authorization and Accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF).
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assess security events to determine impact and implementing corrective actions.
• Ensure the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services.

Qualifications

3+ years experience in cyber security or information assurance including at least 3 years in a DoD environment. Bachelor’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must hold one of the following certifications: CAP, CASP+/SecurityX, CISM, CISSP, GSLC, and/or CCISO. Experience with the certification and accreditation (C&A), assessment and authorization (A&A), and RMF. Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems. Knowledge of intrusion prevention and network access control tools/systems. Must have experience with acquisition and sustainment. Understanding of system audit principles and security risk assessment. Must have a solid understanding of network infrastructure and mission assurance. Familiar with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB. Must have solid communications skills and be capable of working with all levels of an organization. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled