Cyber Security Engineering SME

Abacus Technology; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Abacus Technology is seeking a Cyber Security Engineering SME to provide security and test & evaluation support for the RETS program in Washington, DC. The role is full-time and focuses on maintaining a robust security posture across DoD information systems.

The candidate will serve as the ISSM, guide RMF implementations, and lead A&A activities, ensuring compliance with DoD policies. A TS/SCI clearance and SAP eligibility are preferred, with strong communication and project management skills

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field.
• Hold at least one of the listed cybersecurity certifications (CISSP/CISM/CISA/CASP+/OSCP/GIAC/CCSP).
• US citizenship with a current TS/SCI clearance and SAP eligibility are required.

Responsibilities

• Serve as Information System Security Manager (ISSM) and provide cybersecurity guidance to AOs.
• Support RMF implementation and maintain IS security posture across systems.
• Develop and maintain formal information security programs and policies.
• Lead A&A activities and ensure artifacts meet DoD and Air Force requirements.
• Report on IS/Platform IT systems assessment status and authorization status.
• Coordinate cybersecurity inspections, tests, and reviews with stakeholders.
• Ensure secure configuration of IT products and services before DoD connection.
• Author and maintain security plans including RMF Implementation Plans and risk analyses.

Skills

ISSM

RMF

A&A

Cybersecurity policy

Security architecture

Threat assessment

System security planning

Communication

Project management

US security clearance

Education

Bachelor's degree in computer science / cybersecurity

CISSP

CISM

CISA

CASP+

OSCP

GIAC

CCSP

Job description

Cyber Security Engineering SME

Job Locations: US-DC-Washington

Overview

Abacus Technology is seeking a Cyber Security Engineering SME to provide security and test and evaluation support for the RDT&E Engineering and Technical Support (RETS) program. This is a full-time position.

Responsibilities

• Serve as the Information System Security Manager (ISSM) and act as technical advisors to AOs, primarily responsible for maintaining the overall security posture of the systems within their organization and are accountable for the implementation of DoDI 8510.01.
• Support implementation of the RMF.
• Develop and maintain a formal Information Systems security program and policies for their assigned area of responsibility.
• Supporting the system/application A&A effort, to include assessing and guiding the quality and completeness of A&A activities, tasks, and resulting artifacts mandated by governing DoD and Air Force policies (i.e., RMF).
• Maintain and report IS and Platform Information Technology systems assessment and authorization status and issues in accordance with DoD Component guidance.
• Ensure that cybersecurity inspections, tests, and reviews are synchronized and coordinated with affected parties and organizations.
• Ensure implementation of Information System security measures and procedures including reporting incidents to the AO and appropriate reporting chains, and coordinating system-level responses to unauthorized disclosures.
• Ensure handling of possible or actual data spills of classified information resident in ISs, are conducted in accordance with DoD regulations.
• Act as the primary cybersecurity technical advisor to the AO for DoD Information Systems and Platform Information Technology systems under their purview.
• Ensure that cybersecurity-related events or configuration changes that may impact DoD Information Systems and Platform Information Technology systems authorization or security posture are formally reported to the AO and other affected parties.
• Ensure the secure configuration and approval of IT below the system level (i.e., products and IT services) in accordance with applicable guidance prior to acceptance into or connection to a DoD Information System or Platform Information Technology system.
• Author, review, certify, and/or maintain IA and security management plans to include RMF Implementation Plans, System Security Management Plans, Information Support Plans, PPPs, Security Risk Analyses, Security Vulnerability and Countermeasure Analyses, Security Concepts of Operations, OPSEC Plans, and other system/network security related documents.

Qualifications

15 years of technical expertise related to cyber engineering and cyberspace test and evaluation with 10 years' experience in project management. 10 years experience supporting the analysis, assessment, demonstration, testing, and/or experimentation of cyber capabilities. Bachelor's degree from an accredited college or university in computer science, Information Technology, cybersecurity, or related science or engineering field. Must hold at least one of the following certifications: CISSP; CISM; CISA; CASP+; OSCP; GIAC; and/or CCSP. Demonstrated participation in the research, development, integration, and testing of innovative technologies for both offensive and defensive cyber. 10 years experience evaluating and validating sensor system performance, effectiveness, and operational feasibility. Demonstrated experience in recommending assessments to determine system performance to risks. Military or DoW experience preferred. Strong communication skills that can be adapted to both the technical and administrator level. Able to demonstrate strong attention to detail. Must be a US citizen and hold a current Top Secret clearance with SCI access (TS/SCI) and SAP eligibility.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled