Cyber Systems Engineer IV – Vulnerability Management

Arcfield; Virginia (MN); Hybrid; USD 116,000 - 201,000; Full time

Job summary

Arcfield is seeking a Vulnerability Management Cyber SE to provide SETA support in Cyber Security and IA. You will handle vulnerability lifecycle tasks, analytics, RMF coordination, and reporting to USCYBERCOM and IC-SCC.

The role requires active TS/SCI with Poly, DoD 8570/8140 certification, and strong analytic skills. Daily duties include metrics development, drafting awareness notices, and coordinating IG FISMA closures.

Qualifications

• Must possess and be able to maintain a TS/SCI with Poly.
• BS with 8-10 years of experience, MS with 6-8 years of experience, Ph.D. with 3-5 years of experience
• Able to support customer’s core hours (0900-1500; Mon – Fri)
• A Cyber Certification (DoD 8570/8140)
• Familiarity with the IT vulnerability management lifecycle.
• Excellent communications skills – Verbal and Non-Verbal
• Strong analytic and risk management skills
• Strong attention to detail and organizational skills
• Self-starter requiring limited direction and supervision
• Experience implementing RMF Process and NIST 800-53 technical controls, as well as developing and maintaining associated certification and accreditation documentation
• Flexibility of schedule based on customer needs

Responsibilities

• Support the IT vulnerability management lifecycle.
• Support government activities and reporting to appropriate IC and DoD authorities (i.e., USCYBERCOM, IC-SCC).
• Assess and manage the implementation of identified corrections associated with high visibility technical vulnerabilities.
• Develop and deliver asset vulnerability views for categories such as mission, cross domain, and location.
• Develop cyber vulnerability analysis for known vulnerabilities, as well as cyber-related metrics and reporting deliverables.
• Document and deliver awareness notices related to cyber vulnerabilities.
• Coordinate and prepare IG FISMA closure requests from field reps and ISSEs.
• Coordinate with RMF stakeholders on closure BoE for EVAR tracked findings.
• Prepare and update slides for weekly and monthly meetings.
• Research trending vulnerabilities and assist with automation efforts.

Job description

Responsibilities

Program Description: The program provides Systems Engineering and Technical Assistance (SETA) support in the areas of Cyber Security and Management to improve the Information Assurance (IA) posture of a National customer. The contracts support functions are: IA Management, Federal Information Security Management Act (FISMA) coordination and reporting, Risk Management Framework (RMF) application, IA compliance measurements and metrics, Assessment and Authorization (A&A), Vulnerability Management, and Cyber Defense support.

Position Description: The Vulnerability Management Cyber SE provides support to the customer in the area of Cyber Security. Daily tasks include, but are not limited to:

• Support the IT vulnerability management lifecycle.
• Support government activities and reporting to appropriate IC and DoD authorities (i.e., USCYBERCOM, IC-SCC)
• Assess and manage the implementation of identified corrections associated with high visibility technical vulnerabilities
• Using several database sources, collect the necessary metrics to develop and deliver a periodic Cyber Vulnerabilities Metrics Report
• Develop and deliver asset vulnerability views for categories such as mission, cross domain, and location, as required by the customer
• Develop cyber vulnerability analysis for known vulnerabilities, as well as cyber-related metrics and reporting deliverables
• Document and deliver awareness notices related to cyber vulnerabilities
• Document and deliver Government activities and reporting related to tasking and directions received from external stakeholders (i.e., USCYBERCOM, IC-SCC).
• Coordinate and prepare Inspector General (IG) FISMA closure requests from field reps and program Information System Security Engineers (ISSEs)
• Coordinate with RMF stakeholders on closure Body of Evidence (BoE) for Enterprise Vulnerability and Remediation (EVAR) tracked findings
• Prepare and update slides for weekly and monthly meetings
• Research trending vulnerabilities being reported through enterprise security tools
• Support the automation of current activities with system engineers and software developers from other groups and offices
• Ensure divisional processes are accurately documented and kept up to date
• Maintain representation of divisional activities and metrics via Confluence on a weekly basis
• Integrate analysis with intelligence and cyber operations functions
• Assist with the development of new processes and deliverables to support enterprise vulnerability analysis designed to inform the enterprise of existing vulnerabilities and help prioritize remediation efforts

Qualifications

Required:

• Must possess and be able to maintain a TS/SCI with Poly
• BS with 8-10 years of experience, MS with 6-8 years of experience, Ph.D. with 3-5 years of experience
• Able to support customer’s core hours (0900-1500; Mon – Fri)
• A Cyber Certification (DoD 8570/8140)
• Familiarity with the IT vulnerability management lifecycle.
• Excellent communications skills – Verbal and Non-Verbal
• Strong analytic and risk management skills
• Strong attention to detail and organizational skills
• Excellent communications skills
• Self-starter requiring limited direction and supervision
• Experience implementing RMF Process and NIST 800-53 technical controls, as well as developing and maintaining associated certification and accreditation documentation
• Flexibility of schedule based on customer needs

Desired:

• Bachelor of Science Degree in Science, Technology, Engineering or Mathematics (STEM) or an advanced IA certification
• Experience supporting IT domain or IC experience with acquisition and project management
• Experience briefing senior customer personnel
• Ability to organize and prioritize numerous customer requests
• Familiarity with customer's IA processes
• Experience with SNOW, Splunk and ACAS
• Familiarity with Cross Domain Systems (CDS)
• Experience supporting IC or DoD in the Cybersecurity Domain

Equal Pay Act

This is the projected compensation range for this position. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (For Remote Opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, Arcfield ’s benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, Short Term and Long-Term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.Min: $115,575.93Max: $200,964.12

EEO Statement

We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.