Cybersecurity Engineer

Tyto Athene, LLC; Virginia Beach (VA); On-site; USD 100,000 - 115,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

Professional development reimbursement

Job summary

Tyto Athene, LLC is looking for a Cybersecurity Engineer to provide cybersecurity engineering support for government program management in Virginia Beach, VA. Applicants should have over four years of IT security experience and a Bachelor’s Degree in a related field.

The role involves ensuring security requirements are integrated into systems, applying the RMF, and preparing various security documentation. The salary range is typically between $100,000 and $115,000, along with a comprehensive benefits package.

Qualifications

• 4+ years of experience in IT security.
• Possess an IAT Level II certification.
• Understanding of DOD cybersecurity policies.

Responsibilities

• Provide cybersecurity engineering support throughout the SDLC.
• Apply RMF to program information systems.
• Review ACAS vulnerability scans.

Skills

IT security experience

RMF methodology

Security Risk Assessment

Communication skills

STIG Viewer

Education

Bachelor’s Degree in computer science or related discipline

Tools

DISA tools

eMASS

Job description

Description

Tyto Athene is seeking a Cybersecurity Engineer to support a Government Program Management Office in Virginia Beach, VA.

Responsibilities

• Provide cybersecurity engineering support as part of the system development life cycle (SDLC). Ensure security requirements are integrated into the system architecture, design, development, testing, assessment, authorization, delivery, and sustainment.
• Apply the cybersecurity risk management framework (RMF) to program information systems in accordance with NIST SP 800-37 (RMF for Information Systems and Organizations) and DoDI 8510.01 (RMF for DoD Information Technology).
• Implement the RMF life cycle steps to achieve system authorization and operation. Build, maintain, and track system’s cybersecurity baselines and security authorization documentation to the Enterprise Mission Assurance Support Service (eMASS).
• Provide support to cybersecurity architecture and assessment & authorization (A&A) processes, ultimately leading to Authority to Operate (ATO) decision.
• Identify and employ cybersecurity best practices for the organization. Create a well-informed plan based on DOD and Navy cybersecurity strategy and manage the adaption process. Incorporate security management into hardware, software, and applications.
• Assist Government managers with information security oversight, policy analysis, IT product acquisition, and program execution in accordance with NIST SP 800-39 (Managing Information Security Risk: Organization, Mission, and Information System View) and the DoDI 8500.01 (Defense Cybersecurity Program).
• Engage with Program Office managers and technical stakeholders to interpret technical requirements, standards/policies, architectural artifacts, budget development, implementation, auditing, program briefs, and continuous monitoring.
• Review Assured Compliance Assessment Solution (ACAS) vulnerability scans. Review, analyze and evaluate Security Technical Implementation Guides (STIGs) and Security Content Automation Protocol (SCAP) content for each applicable system component.
• Prepare and review documentation to include Systems Security Plans (SSP), Security Assessment Plans (SAP), Risk Assessment Reports (RAR), A&A packages, and System Requirements Traceability Matrices (SRTMs).

Qualifications

Required:

• Four (4) or more years of experience in IT security, including RMF methodology and A&A.
• Bachelor’s Degree in computer science, cybersecurity, information systems, or other related technical discipline; or Associate’s Degree and six (6) or more years of cybersecurity experience.
• Cybersecurity Workforce (CSWF) Intermediate Level knowledge/skills (IAT Level II), with specific course completion or renewal certificate.
• Exceptional understanding of DOD cybersecurity policies, RMF steps and structure, A&A process, and gaining system authorization to operate (ATO).
• Ability to operate and execute DISA tools, STIG Viewer, eMASSter and a strong familiarity with eMASS functionality.
• Strong communication skills with all levels of the IT workforce and can translate complex technical topics for senior decision-makers. Prepare/deliver presentations to leadership.

Desired:

• Familiarity with Department of the Navy cybersecurity policies, organizations, and missions.
• Cybersecurity Workforce (CSWF) Advanced Level knowledge/skills (IAT Level III).

Location

• Virginia Beach, VA

Clearance

• Secret Clearance required

Compensation

• Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $100,000-$115,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Benefits

• Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.

Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.