Cyber Security Engineer

starfish; Huntsville (AL); On-site; USD 110,000 - 165,000; Full time

Job summary

Torch Technologies is seeking a Cyber Security Engineer to join the OSF Infrastructure team in Huntsville, AL. You will provide critical technical expertise for real-time HWIL M&S integration, securing tests and environments for DoD programs and Missile Defense Agency events.

The role requires DoD RMF/IA experience, active security clearance at SECRET level with TS/SCI eligibility, and hands-on work with Red Hat Linux, ACAS/Nessus, and related security tools. Expect travel up to 10%.

Qualifications

• U.S. Citizenship required.
• Bachelor's degree in CS/Engineering/Information Systems or related field; equivalent experience considered.
• 4+ years of related experience.

Responsibilities

• Perform RMF-based information assurance activities and risk analysis.
• Monitor and enforce DoD security, resilience, and dependability requirements.
• Document security posture, vulnerabilities, and deviations with evidence.
• Operate DoW tools and security monitoring solutions and conduct regular audits.
• Travel to domestic and foreign sites for inspections and validation.

Skills

Security clearance

Team collaboration

Communication skills

Risk management

Education

Bachelor's degree

Tools

Red Hat Enterprise Linux

eMASS

STIG

ACAS

Nessus

Job description

Torch Technologies

Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation’s top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: "Lighting the Pathway of Freedom". And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking a dedicated Cyber Security Engineer to join our Objective Simulation Framework (OSF) Infrastructure team. In this role, you will provide critical technical expertise for the Modeling & Simulation (M&S) integration of real-time Hardware-in-the-Loop (HWIL) architectures. Your work will directly secure and enable Missile Defense Agency (MDA) ground tests, flight tests, and other advanced HWIL events

As a Cyber Security Engineer your duties will include the following, but are not limited to:

• Perform technical work utilizing the Risk Management Framework (RMF) process including analyzing and solving Information Assurance (IA)-related technical problems.
• Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
• Documenting preliminary or residual security risks for system operation.
• Verifying that the software application/network/system authorization and assurance documentation is current.
• Monitoring and evaluating a system's compliance with DoD security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
• Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls. Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Responsible for the operation of DoW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic, Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
• Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites approximately 10% travel.
• Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.

Required Qualifications:

• U.S. Citizenship
• Bachelor's degree in computer science, Engineering, Information Systems, or related field (equivalent professional experience considered)
• 4+ years of related experience.
• Active SECRET security clearance with ability to obtain and maintain TS/SCI
• Experience with Red Hat Enterprise Linux operating systems.
• Working knowledge of DoD security policies and procedures.
• Self-starter that thrives in a dynamic environment and works well within a team environment.
• Effective oral and written communication skills for working within a team environment.
• Candidate must possess an understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), IAVAs or with DoW information assurance applications such as Assured Compliance Assessment Solution (ACAS) for vulnerability scans, network configuration assessments, and network discovery and Security Content Automation Protocol (SCAP)/Evaluate-STIG Validation Tool for validating system compliance.
• Candidates must comply with the experience, training, and certification requirements to satisfy DoD 8140 (DoD 8570.01) Information Assurance Technical (IAT) level III and Information Assurance Management (IAM) Level III Certification upon employment (e.g., CISSP, CISM)

Preferred Qualifications:

• Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
• Linux certification e.g., Linux+, LPIC,