Cyber Security Engineer

Torch Technologies, Inc.; Huntsville (AL); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

ESOP

401(k) match

Medical

Dental

Vision

Life insurance

Short-term disability

Long-term disability

FSA

HSA/HRA

EAP

Education assistance

Paid time off

Holidays

Job summary

Torch Technologies, Inc. is seeking a Cyber Security Engineer to join the OSF Infrastructure team in Huntsville, AL. You will apply RMF processes, security best practices, and DoD compliance to secure real-time HWIL test environments supporting MDA missions.

Strong communication and teamwork are essential as you document risks and ensure continuous authorization, with up to 10% travel. Requirements include SECRET clearance with potential TS/SCI, a STEM degree, and experience with Linux and DoD

Qualifications

• Bachelor's degree in computer science, engineering, information systems, or related field.
• 1

Responsibilities

• Perform RMF processing and IA problem solving.
• Monitor risk, compliance, and assurance per DoW requirements.
• Document security posture, vulnerabilities, and ensure authorization current.
• Travel up to 10% to domestic/foreign sites.

Skills

Teamwork

Communication

Self-starter

Risk assessment

Problem solving

Education

Bachelor's degree in computer science, engineering, information systems, or related field

Tools

Red Hat Enterprise Linux

eMASS

STIG

ACAS

SCAP

Job description

Torch Technologies

Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation's top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: "Lighting the Pathway of Freedom". And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking a dedicated Cyber Security Engineer to join our Objective Simulation Framework (OSF) Infrastructure team. In this role, you will provide critical technical expertise for the Modeling & Simulation (M&S) integration of real-time Hardware-in-the-Loop (HWIL) architectures. Your work will directly secure and enable Missile Defense Agency (MDA) ground tests, flight tests, and other advanced HWIL events

As a Cyber Security Engineer your duties will include the following, but are not limited to:

• Perform technical work utilizing the Risk Management Framework (RMF) process including analyzing and solving Information Assurance (IA)-related technical problems.
• Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
• Documenting preliminary or residual security risks for system operation.
• Verifying that the software application/network/system authorization and assurance documentation is current.
• Monitoring and evaluating a system's compliance with DoD security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
• Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls. Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Responsible for the operation of DoW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic, Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
• Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites approximately 10% travel.
• Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.

Required Qualifications:

• U.S. Citizenship
• Bachelor's degree in computer science, Engineering, Information Systems, or related field (equivalent professional experience considered)
• 4+ years of related experience.
• Active SECRET security clearance with ability to obtain and maintain TS/SCI
• Experience with Red Hat Enterprise Linux operating systems.
• Working knowledge of DoD security policies and procedures.
• Self-starter that thrives in a dynamic environment and works well within a team environment.
• Effective oral and written communication skills for working within a team environment.
• Candidate must possess an understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), IAVAs or with DoW information assurance applications such as Assured Compliance Assessment Solution (ACAS) for vulnerability scans, network configuration assessments, and network discovery and Security Content Automation Protocol (SCAP)/Evaluate-STIG Validation Tool for validating system compliance.
• Candidates must comply with the experience, training, and certification requirements to satisfy DoD 8140 (DoD 8570.01) Information Assurance Technical (IAT) level III and Information Assurance Management (IAM) Level III Certification upon employment (e.g., CISSP, CISM)

Preferred Qualifications:

• Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
• Linux certification e.g., Linux+, LPIC, Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE).
• Previous experience with the Missile Defense Agency elements, components, or equivalent system of system environments.

Schedule:

M-F; 8-5

Work Location:

Huntsville, AL (Redstone Arsenal - 5400 Fowler Rd, Huntsville, AL 35898)

Travel:

0-10%

Relocation Assistance Available:

No

Position Contingent Upon Award of Contract:

No

#LI-DK1

Benefits:

• ESOP participation
• 401(k) match
• medical
• dental
• vision
• life insurance
• short-term disability
• long-term disability
• flexible spending accounts
• Health Saving Accounts and Health Reimbursement Accounts
• EAP
• education assistance
• paid time off
• holidays

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. Torch Technologies, Inc. participates in E-Verify.