Cyber Security Engineer

Abacus Technology Corporation; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Abacus Technology Corporation seeks a Cyber Security Engineer to support the C3I&N Directorate at Hanscom AFB, providing security for systems, networks, and data. The role requires DoD RMF experience, A&A familiarity, and a current security clearance.

You will contribute to risk assessments, policy development, and incident response. Qualified candidates have 3+ years in cyber security or information assurance, a related Bachelor’s degree, and relevant certifications.

Qualifications

• 3+ years in cyber security or information assurance, incl. 3 years in a DoD environment.
• Bachelor’s degree in a related field.
• Certifications: CAP, CASP+/SecurityX, CISM, CISSP, GSLC, CCISO.
• Experience with C&A, A&A, and RMF.
• Familiar with DIACAP, FISMA, NIST, and OMB standards.

Responsibilities

• Ensure confidentiality, integrity, and availability of systems, networks, and data through security programs, policies, procedures, and tools.
• Support the A&A effort, assess and guide RMF activities and artifacts.
• Recommend policies to ensure system and data security and prevent unauthorized access.
• Conduct risk and vulnerability assessments of information systems.
• Promote security awareness among management and ensure security principles are reflected in organizational goals.
• Perform system security evaluations, audits, and reviews.
• Recommend disaster recovery procedures and contingency plans.
• Ensure users adhere to security policies and participate in network/system design for proper security implementation.
• Assist in gathering and preserving evidence for cyber investigations.
• Assess security events to determine impact and corrective actions.
• Ensure rigorous application of information security in IT services.

Skills

Cyber security

Information assurance

RMF

Vulnerability scanning

Communication skills

US Citizenship

Education

Bachelor's degree

Tools

Vulnerability management systems

Intrusion prevention tools

Network access control tools

Job description

Overview

Abacus Technology is seeking a Cyber Security Engineer to provide security support for the Command, Control, Communication, Intelligence and Networks (C3I&N) Directorate at Hanscom AFB. This is a full-time position.

Responsibilities

• Ensure the confidentiality, integrity, and availability of systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools.
• Support the system/application Authorization and Accreditation (A&A) effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., Risk Management Framework (RMF).
• Recommend policies and procedures to ensure the reliability of and accessibility to information systems and to prevent and defend against unauthorized access to systems, networks, and data.
• Conduct risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and protection needs.
• Promote awareness of security issues among management and ensuring sound security principles are reflected in organizations’ visions and goals.
• Conduct systems security evaluations, audits, and reviews.
• Recommend systems security contingency plans and disaster recovery procedures.
• Recommend and implement programs to ensure that systems, network, and data users are aware of, understand, and adhere to systems security policies and procedures.
• Participate in network and systems design to ensure implementation of appropriate systems security policies.
• Facilitate the gathering, analysis, and preservation of evidence used in the prosecution of computer crimes.
• Assess security events to determine impact and implementing corrective actions.
• Ensure the rigorous application of information security/cybersecurity policies, principles, and practices in the delivery of all IT services.

Qualifications

3+ years experience in cyber security or information assurance including at least 3 years in a DoD environment. Bachelor’s degree in a related field. Additional years of experience may be substituted for degree requirements. Must hold one of the following certifications: CAP, CASP+/SecurityX, CISM, CISSP, GSLC, and/or CCISO. Experience with the certification and accreditation (C&A), assessment and authorization (A&A), and RMF. Significant experience in vulnerability scanning and analysis, including the use of automated tools and vulnerability management systems. Knowledge of intrusion prevention and network access control tools/systems. Must have experience with acquisition and sustainment. Understanding of system audit principles and security risk assessment. Must have a solid understanding of network infrastructure and mission assurance. Familiar with Federal government and DOD standards for IA/security including DIACAP, FISMA, NIST, and OMB. Must have solid communications skills and be capable of working with all levels of an organization. Must be a US Citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled