Cyber Security Engineer

Millennium; Lincoln (MA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Millennium Corporation is seeking a Cyber Security Engineer III for a hybrid role based out of Hanscom AFB. The position requires an active top secret clearance and offers a hybrid work arrangement.

You will serve as a technical SME for ISSO matters and lead security assessments for the AOC WS development suites, delivering recommended actions for STIGs and ACAS findings. You will design and implement security controls, assess system changes, and ensure alignment with RMF, DoD guidance, and

Qualifications

• ALL candidates MUST have an active top secret clearance to qualify for consideration.
• BS/BA Degree and 7+ yrs of experience and 5 yrs within DoD.
• Strong understanding of cybersecurity principles, practices, and technologies.

Responsibilities

• Serve as technical point of contact and SME for ISSO-related matters.
• Complete security assessments on AOC WS development suites; prepare final security assessment reports with recommendations for STIGs and ACAS findings.
• Provide technical input and implementation guidance to ensure compliance with DoD/AF guidance.

Skills

RMF implementation

Cybersecurity principles

Threat analysis

DoD guidance

Education

BS/BA Degree

Tools

Nessus/ACAS (DoD)

Job description

Millennium Corporation is hiring a Cyber Security Engineer III to join an effort based out of Hanscom AFB in a hybrid capacity. ALL candidates MUST have an active top secret clearance to qualify for consideration.

Duties include, but not limited to:

• Serve as a technical point of contact and subject matter expert for ISSO-related matters.
• Complete security assessments on the AOC WS development suites, prepare the final security assessment reports, which includes technical recommendations for both STIGs and ACAS findings.
• Provide technical input, recommendations, and assistance with the implementation of cyber security approaches, methods and solutions that incorporate and maintain compliance to requirements resulting from laws, regulations, and other DoD and AF guidance.
• Assess proposed changes to information systems, their environment of operation, and mission needs that could affect system authorization.
• Provide purposeful security architecting, design, development, and configuration of information systems to the AOC WS ISSM. Provide inputs to the AOC WS ISSM for designing and developing organizational information systems and upgrading legacy systems.
• Employ best practices when implementing security requirements for information systems including software engineering methodologies, system/security engineering principles, secure design, secure architecture, and secure coding techniques.
• Apply knowledge of technical, analytical skills to ensure the confidentiality, integrity, and availability of all information systems assets and ensure compliance with company policies, procedures, contractual, and regulatory requirements.
• Responsible for supporting LAN/WAN security solutions including creating and maintaining LAN/WAN security standards and design documentation
• Stay ahead of cyber security developments, recommend cutting-edge security solutions, and manage the integration of these technologies into existing AOC WS development suites.
• Develop and implement network security policies, ensuring alignment with legal and organizational standards, and conduct regular system audits to identify and mitigate vulnerabilities.
• Investigate, monitor, and troubleshoot firewall-related issues including performance and connectivity problems and security logs to identify and respond to potential threats and vulnerabilities, conducting routine PAN OS checks for monitoring and analysis.
• Maintain detailed and accurate documentation of firewall configurations, changes, and network diagrams.
• ACAS experience required

Qualifications:

• ALL candidates MUST have an active top secret clearance to qualify for consideration.
• BS/BA Degree and 7+ yrs of experience and 5 yrs within DoD.
• Strong understanding of cybersecurity principles, practices, and technologies
• Risk Management Framework (RMF), with emphasis on taking projects from Step 1 to Step 5
• Vulnerability Management, Tenable Nessus (ACAS-DoD version of Nessus) STIGs, capable of applying system security engineering expertise to various client/server environments.