Cyber Security Engineer

TECHEAD; San Diego (CA); Presencial; USD 130 000 - 170 000; Tempo integral

Resumo da oferta

TECHEAD is seeking a seasoned cybersecurity professional to lead RMF-based accreditation efforts, manage eMASS workflows, and maintain DISA circuits. The role emphasizes crafting SSPs/SAPs/SARs, performing control testing, and driving continuous monitoring.

Ideal candidates will have a DoD IAM Level II certification (CISSP preferred) and 10+ years in cybersecurity or A&A, with a focus on risk assessment and remediation strategies. Active Secret clearance is required.

Qualificações

• Active Secret clearance required.
• 10+ years in cybersecurity, incident response, or A&A accreditation.

Responsabilidades

• Develop SSPs, SAPs, and SARs.
• Test security controls and apply tailoring.
• Maintain POA&Ms with mitigation statements.
• Execute eMASS tasks: IV&Vs, STIG checks, ASRs, and resubmissions.
• Maintain DISA circuit connections and cloud service provider inheritances.
• Oversee accreditation workflows and incident remediation actions.

Conhecimentos

RMF

eMASS

Incident response

A&A accreditation

Security controls

Risk analysis

Threat mitigation

Formação académica

DoD IAM Level II certification

CISSP (preferred)

Ferramentas

SSP development

POA&M management

Descrição da oferta de emprego

TECHEAD is celebrating over thirty-five years of incredible heritage, talent, and accomplishments! To learn more about TECHEAD, visit us at TECHEAD.com or on Glassdoor.

This role maintains cybersecurity monitoring operations, performs triage to assess incident scope and impact, identifies vulnerabilities, and recommends mitigation strategies. Operating with deep expertise in the Risk Management Framework (RMF), the position exercises technical autonomy to manage eMASS workflows, maintain DISA circuit connections, and author core accreditation artifacts to secure operational Authorization to Operate (ATO).

Key Responsibilities

• Develop comprehensive A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), and Security Assessment Reports (SARs).
• Test and apply security controls based on security categorization, applying relevant overlays (privacy, classified, intel) and security control tailoring.
• Conduct active and passive reconnaissance of data; author and maintain Plans of Action and Milestones (POA&Ms) with accurate mitigation statements and control mapping.
• Execute scheduled eMASS accreditation tasks, including Quarterly IV&Vs, quarterly STIG checks, Annual Security Reviews (ASRs), monthly POA&M updates, and ATO/ATC/IATC/IATT resubmissions.
• Maintain DISA circuit connections (CCSDs), manage inheritance from accredited systems and cloud service providers, and oversee workflow schedules for all accreditations.
• Maintain cybersecurity monitoring operations, assess incident scope/impact, and recommend actionable remediation strategies.

Position Qualifications

• 10+ years of progressive cybersecurity, incident response, or A&A accreditation experience. Clearance: Active Secret security clearance.
• Active DoD IAM Level II certification required (one of the following: CAP, CASP+ CE, CISM, CISSP [or Associate], or GSLC).

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP).
• Hands-on capability to triage security incidents, perform vulnerability assessments, and implement remediation strategies.
• Expertise in security control testing, STIG compliance checks, IV&V auditing, and eMASS workflow administration.
• Strong analytical capabilities with IT security software, web security tools, data analytics, and risk management framework applications.

TECHEAD's mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won't strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.