Cyber Security Specialist (AFNWC/NCC)

Apogee Engineering, LLC; Bellevue Second IV Precinct (NE); On-site; USD 130,000 - 170,000; Full time

Job summary

Apogee Engineering, LLC is seeking a Cybersecurity Specialist to support AFLCMC C2 Division at Offutt AFB, NE. The role focuses on identifying cyber weaknesses, developing POA&Ms, and ensuring system security across the Computing Environment.

The successful candidate will perform RMF documentation for secret networks, conduct vulnerability assessments, reviews of designs, and produce security reports. Requires US citizenship, TS/SCI eligibility, and IAM II or DoD 8140 certification, with 15

Qualifications

• US citizenship required.
• Active TS with SCI eligibility required.
• 8570 IAM Level II or DOD 8140 IAM Level II certification required.
• Bachelor’s degree in a relevant discipline.
• Minimum 15 years of DoD-related experience; DoD RMF, NIST 800-53 familiarity.

Responsibilities

• Identify cyber weaknesses and develop POA&M for information assurance.
• Ensure hardware/OS/software meet security requirements and test mitigations.
• Develop RMF documentation for Secret, Top Secret, and JWICS networks.
• Perform vulnerability assessments and security tests on networks and systems.
• Conduct audits and evaluate conformance to established criteria.
• Analyze policies for effectiveness and suggest improvements.
• Document findings, write security reports, discuss solutions with IT teams.
• Assess new technologies and generate best practices.
• Review application designs and source code (Java, JavaScript, C).
• Establish information security assurance processes for system-wide requirements.
• Provide cybersecurity recommendations to ensure compliance.
• Manage fact-finding, analysis, and final reports.

Skills

Policy analysis

Security testing

Risk management

Documentation

Team collaboration

Education

Bachelor’s degree in relevant discipline

Tools

eMASS/XACTA

AppDetective Pro

DBProtect

Fortify Source Code Analyzer

Fortify 360 Server

Fortify Real-Time Analyzer

IBM AppScan

Job description

Overview

Apogee has an exciting new opportunity for a Cybersecurity Specialist in support of the Air Force Life Cycle Management Center (AFLCMC) Combatant Command, Command and Control (C2) Division (HBC).

This is a full-time position located at Offutt AFB, NE

Responsibilities

• Identify areas of cyber weakness within programs and develop a Plan of Action and Milestones (POA&M) required in support of information assurance or security necessities


• Ensure that the design of hardware, operating systems, and software applications adequately addresses security requirements for the Computing Environment (CE), including testing cybersecurity mitigations.


• Development and production of RMF documentation for Secret, Top Secret, and JWICS networks


• Perform vulnerability assessments and security tests on networks, web-based applications, and computer systems


• Conduct network and system security audits, evaluate how well the system conforms to a set of established criteria.


• Analyze policies for effectiveness, make suggestions on security policy improvements, and work to enhance methodology material.


• Document findings, write security reports, and discuss solutions with IT teams and management


• Perform security and technical assessments on new technologies and generate "Best Practices" for implementations of new technologies.


• Perform reviews of application designs and source code (mainly Java, JavaScript, and C).


• Establish and sustain information security assurance processes that satisfy complex system-wide requirements


• Provide cybersecurity recommendations based on evaluation and review of engineering proposals to ensure compliance with mandated cybersecurity requirements


• Manage the fact-finding, analysis, and development of hypotheses, conclusions, and production of final reports and presentations

Qualifications

Minimum Experience:

Citizenship: Must be a US citizenClearance: Must possess and maintain a TS w/SCI eligibilityCertifications: must Hold a 8570 Information Assurance Management (IAM) Level II certification or DODD 8140 Information Assurance Security Engineer Level II certification

Education: Bachelor’s degree in relevant discipline

Years of Experience: Minimum of 15 years of relevant experience, including:

• 5 years supporting the DoD


• Strong knowledge and experience applying DoDD 8500.1 Information Assurance, DoDD 8520.1 Protection of SCI, DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology


• Knowledge and experience with NIST 800-53 and DoD Risk Management Framework tools (eMASS/Xacta)


• Training in application security and software analytical tools used by the IPT, including Application Security AppDetective Pro, Application Security DBProtect, Fortify Source Code Analyzer, Fortify 360 Server, Fortify Real-Time Analyzer, and IBM/Rational AppScan

Additional InformationLocation: Offutt AFB, NEOn-site/Hybrid/Remote: On-SiteTravel: 10%