Cyber Security Engineer

Talentify; Lincoln (MA); On-site; USD 110,000 - 150,000; Full time

Job summary

Abacus Technology is seeking a Cyber Security Engineer to support the C3I&N Directorate at Hanscom AFB. This full-time role focuses on protecting information systems by applying RMF, A&A, and vulnerability management across DoD networks.

The ideal candidate has 3+ years in cyber security, DoD experience, and holds certifications such as CAP, CISSP, or CASP. A Bachelor’s degree and a current Secret clearance are required.

Qualifications

• Bachelor’s degree required; 3+ years in cyber security or information assurance, including DoD experience.
• Experience with RMF, A&A, C&A processes and RMF tailoring.

Responsibilities

• Plan, analyze, implement, maintain, and enhance information systems security programs, policies, and tools to protect systems, networks, and data.
• Support A&A activities and ensure artifacts meet DoD/AF RMF requirements.
• Conduct risk and vulnerability assessments to identify threats and protection needs.
• Promote security awareness and ensure policies are followed across the organization.
• Perform systems security evaluations, audits, and reviews; develop contingency and disaster recovery plans.

Skills

RMF

A&A

Vulnerability scanning

Network security

Security audits

DoD experience

Certifications: CAP

Certifications: CISSP

Certifications: CASP

Clearance: Secret

Education

Bachelor's degree in a related field

Job description

Overview

Abacus Technology is seeking a Cyber Security Engineer to provide security support for the Command, Control, Communication, Intelligence and Networks (C3I&N) Directorate at Hanscom AFB. This is a full-time position.

Responsibilities

• Ensure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools.
• Support the system/application Authorization and Accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF).
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assess security events to determine impact and implementing corrective actions.
• Ensure the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services.

Qualifications

3+ years experience in cyber security or information assurance including at least 3 years in a DoD environment. Bachelor’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must hold one of the following certifications: CAP, CASP+/SecurityX, CISM, CISSP, GSLC, and/or CCISO. Experience with the certification and accreditation (C&A), assessment and authorization (A&A), and RMF. Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems. Knowledge of intrusion prevention and network access control tools/systems. Must have experience with acquisition and sustainment. Understanding of system audit principles and security risk assessment. Must have a solid understanding of network infrastructure and mission assurance. Familiar with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB. Must have solid communications skills and be capable of working with all levels of an organization. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled