Cyber Security Engineer

GovCIO; San Antonio (TX); On-site; USD 125,000 - 135,000; Full time

Job summary

GovCIO is seeking a Cyber Security Engineer in San Antonio, TX to perform security engineering for Air Force Intelligence System. This onsite role requires TS/SCI clearance and hands-on security design across the system lifecycle.

The position emphasizes RMF, ATO, and continuous monitoring, with collaboration across teams to translate requirements into secure architectures and documentation.

Qualifications

• High School with 9+ years of commensurate experience.
• Clearance TS/SCI required.
• CISSP or Equivalent certification.
• Experience in the intelligence community and security engineering.

Responsibilities

• Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, insider threat detection and mitigation, physical security analysis and security management.
• Configures and validates secure systems and tests security products to detect security weaknesses; performs vulnerability analysis.
• Ensures security features on all information systems as required by DoD/IC policy and industry best practices.
• Performs security certification testing, accreditation planning and testing, and maintains RMF/ATO/Continuous Monitoring artifacts.

Skills

CISSP Or Equivalent

Security engineering principles

Intelligence community experience

Security tools: ACAS, STIGViewer, Xact

Risk Management Framework

Security automation tools

Common Criteria and NIAP

Education

High School with 9+ years experience

Job description

GovCIO is currently hiring a Cyber Security Engineer to perform security engineering for Air Force Intelligence System. This position will be located in San Antonio, TX and will be an onsite only position.

Responsibilities

Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, internal counter-espionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management). Assesses and mitigates system security threats and risks throughout the program life cycle. Validates system security requirements definition and analysis. Establishes system security designs. Implements security designs in hardware, software, data, and procedures. Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities. Supports secure systems operations and maintenance.

• Participates with the client in the strategic design process to translate security and business requirements into technical designs.
• Configures and validates secure systems and tests security products and systems to detect security weakness; performs network scanning and vulnerability analysis.
• Ensures that the appropriate security features and safeguards have been implemented on all information systems as required by DoD/IC policy and directives, and industry best practices.
• Performs defense device system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of all implemented, maintained, and deployed systems.
• Provides security certification test and evaluation of assets, vulnerability management and response, security assessments, customer support and provides guidance on securityissues.

• Establishes a security-oriented methodology to inspect and test new and existing technologies.
• Utilizes risk management framework (RMF) knowledge to document a consistent set of criteria for security requirements for new and existing technologies.
• Incorporates supply chain risk management (SCRM) best practices to advocate for security on engineering and plans teams.
• Assesses applicability of available STIGs, vendor best practices and/or other related security benchmarks and collaborates with other security teams on implementation strategies.
• Drafts inputs and supporting documentation for security requirements, change, and configuration management where applicable.
• Automates all security requirement criteria and inspection/test methodologies into security tools where feasible.
• Provides and interprets outputs of the engineering and plans processes with other members of the security team.
• Works with the technical writer to create security-focused portions of technical design guides, security impact analyses, and other artifacts as required.
• Provides subject matter expert level support to internal cybersecurity teams to ensure all RMF, Authorization to Operate (ATO), and Continuous Monitoring artifacts and documents are submitted and updated appropriately.

Qualifications

High School with 9+ years (or commensurate experience)

Clearance Required: TS/SCI

Required Skills and Experience

• CISSP Or Equivalent
• Expertise in security engineering principles
• Experience working in the intelligence community
• Understanding of common security tools such as ACAS, STIGViewer, Xacta/eMASS
• Understanding of Risk Management Framework
• Experience with security automation tools
• Experience using Common Criteria and NIAP

Preferred Skills and Experience

• Experience with Zero Trust implementation
• Knowledge of Service Now
• Excellent written/verbal skills
• Possess soft skills to lead, communicate, focus on details, priortization, decision-making, presentation and a strong analytical and problem solving skill

#dl #nss #ar #tmk #tlm #jp #mav

Posted Salary Range

USD $125,000.00 - USD $135,000.00 /Yr.