Cyber Security Engineer

Abacus Technology Corporation; Lincoln (MA); On-site; USD 110,000 - 150,000; Full time

Job summary

Abacus Technology Corporation is seeking a Cyber Security Engineer to support the C3I&N Directorate at Hanscom AFB. The role focuses on safeguarding systems, networks, and data through RMF/A&A activities and security program development.

Responsibilities include risk assessments, auditing, and enforcement of security policies, with emphasis on DoD standards and clear communication across the organization. A Secret clearance and US citizenship are required for eligibility.

Qualifications

• Three+ years in cyber security or information assurance with DoD exposure.
• Bachelor’s degree in a related field; substitutions possible for experience.
• Certifications such as CAP, CASP+, CISM, CISSP, GSLC, or CCISO preferred.
• Experience with RMF, A&A, and C&A; familiarity with DIACAP, FISMA, NIST, OMB.
• US citizen with current Secret clearance and strong written/verbal communications.

Responsibilities

• Plan, analyze, implement, and maintain information systems security programs.
• Support RMF A&A efforts and assess artifacts and policies.
• Develop procedures to ensure secure systems and prevent unauthorized access.
• Perform risk and vulnerability assessments and recommend mitigations.
• Promote security awareness across management and staff.
• Conduct systems security evaluations, audits, and contingency planning.
• Assist in design reviews to enforce security controls.
• Gather and preserve evidence for investigations of cyber incidents.

Skills

DoD experience

Cyber security

Communication

Security awareness

Education

Bachelor’s degree in related field

Tools

RMF/A&A processes

Vulnerability scanning tools

Network access control tools

Job description

Overview

Abacus Technology is seeking a Cyber Security Engineer to provide security support for the Command, Control, Communication, Intelligence and Networks (C3I&N) Directorate at Hanscom AFB. This is a full-time position.

Responsibilities

• Ensure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools.
• Support the system/application Authorization and Accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF).
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assess security events to determine impact and implementing corrective actions.
• Ensure the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services.

Qualifications

3+ years experience in cyber security or information assurance including at least 3 years in a DoD environment. Bachelor’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must hold one of the following certifications: CAP, CASP+/SecurityX, CISM, CISSP, GSLC, and/or CCISO. Experience with the certification and accreditation (C&A), assessment and authorization (A&A), and RMF. Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems. Knowledge of intrusion prevention and network access control tools/systems. Must have experience with acquisition and sustainment. Understanding of system audit principles and security risk assessment. Must have a solid understanding of network infrastructure and mission assurance. Familiar with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB. Must have solid communications skills and be capable of working with all levels of an organization. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled