Cyber Security Engineer

Trinity Global Consulting; McKnight and Bay (MA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental & Vision Coverage

Paid Time Off

Paid Holidays

Disability & Life Insurance

401(k) Retirement Plan

Professional Training

Job summary

A consulting firm in Massachusetts is seeking a cybersecurity professional to support system assessment and authorization processes. Responsibilities include applying RMF processes, developing security documentation, and conducting vulnerability assessments. Candidates should possess a bachelor's degree, 5+ years of experience, and relevant certifications. US citizenship and an active Top Secret clearance are required. Benefits include comprehensive health coverage, paid time off, and a 401(k) retirement plan.

Qualifications

• DoD 8570 IAT Level II or higher certification required.
• Experience with RMF, A&A, POA&M, and ATO documentation.
• Hands-on vulnerability scanning and compliance tracking experience required.
• Knowledge of NIST 800-series publications and incident response processes required.
• US Citizenship and active Top Secret clearance required.
• Experience securing Linux/Windows and applying STIGs.
• Knowledge of NIST 800-series and incident response.

Responsibilities

• Apply RMF processes to support system Assessment & Authorization.
• Develop and maintain security documentation such as SSPs and ATO artifacts.
• Conduct vulnerability assessments and track remediation.
• Implement security controls aligned with NIST 800-53.
• Monitor systems for security events and support incident response.
• Monitor security events and assist incident response and risk mitigation.
• Collaborate with engineers and DevSecOps to secure lifecycle.
• Provide cybersecurity risk input to leadership and stakeholders.

Skills

Analytical skills

Communication skills

Collaboration skills

US Citizenship

Education

Bachelor's degree with 5+ years of experience

Tools

XACTA

eMASS

Linux

Windows

ACAS

NIST 800-series

Jira

Confluence

Job description

Duties May Include:

• Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoring
• Develop, review, and maintain security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASS
• Conduct vulnerability assessments and compliance scans (e.g., ACAS) and track remediation of findings and IAVM requirements
• Implement and validate security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidance
• Support system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devices
• Monitor systems for security events and support incident response and risk mitigation activities
• Assess security impacts of system changes and support configuration control boards (CCBs)
• Collaborate with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycle
• Provide cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders

Required Qualifications:

• Bachelor's degree with 5+ years of experience (or equivalent experience)
• DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP)
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS)
• Hands-on vulnerability scanning and compliance tracking (ACAS, IAVM)
• Experience securing Linux and Windows systems, STIGs, patching, and system hardening
• Knowledge of NIST 800-series publications and incident response processes
• Strong analytical, communication, and collaboration skills
• US Citizenship required
• Active or current (within two years of active) Top Secret clearance with SCI eligibility

Desired Qualifications:

• Scripting or development experience (Python, Java, React)
• DevSecOps tools and pipeline experience
• Experience with Linux (Red Hat/CentOS), databases, web apps, or big data platforms
• Familiarity with Agile environments and tools (Jira, Confluence)
• Experience with NIST SP 800-171 and System Security Engineering (SSE)

At Trinity Global Consulting (TGC), we value our employees and provide a comprehensive benefits package that includes:

• Medical, Dental & Vision Coverage – Coverage for eligible employees and family through CareFirst and VSP.
• Paid Time Off – PTO granted in accordance with contract requirements.
• Paid Holidays – 11 federal holidays observed annually.
• Disability & Life Insurance – Short-term/long-term disability, life insurance, and AD&D coverage included.
• 401(k) Retirement Plan – Competitive plan managed through Ameritas.
• Professional Training – Formal training provided as required, with additional learning opportunities based on role.