Cybersecurity Engineer and Risk Analyst

Military, Veterans and Diverse Job Seekers; San Diego (CA); On-site; USD 110,000 - 140,000; Full time

Job summary

Military, Veterans and Diverse Job Seekers seeks a Cybersecurity Engineer and Risk Analyst to support military C2I programs. You will ensure cybersecurity requirements are integrated through the acquisition lifecycle, from pre-award to accreditation, and contribute to system documentation including strategies and architectures.

You will leverage emerging technologies for resilient defenses, review security plans, and lead cross-stakeholder working groups to align risk management with mission

Qualifications

• 2+ years leading complex cybersecurity projects or programs.
• 2+ years using RMF and A&A activities to obtain/maintain an ATO.
• 2+ years with NIST standards and CNSSI 1253 guidance.
• Experience identifying risk and developing mitigation plans.
• Experience with assessment and authorization for risk decisions.
• Experience with Linux or Windows Server 2008+ administration.
• Experience developing security assessment reports.

Responsibilities

• Support systems engineering and integration for military C2I programs.
• Ensure cybersecurity requirements across the system lifecycle from pre-award to accreditation.
• Review cybersecurity strategies, network architectures, and implementation plans.
• Lead and participate in working groups with stakeholders and mission partners.

Skills

Risk assessment

Mitigation planning

Communication

Stakeholder engagement

System engineering

Tools

RMF

A&A processes

NIST standards

CNSSI 1253

Vulnerability scanners

Firewall / IPS

Job description

About the job Cybersecurity Engineer and Risk Analyst

Key Role:

Support systems engineering and integration activities for military command, control, communications, computers, and intelligence programs. Ensure cybersecurity requirements are incorporated throughout the system's acquisition life cycle, from pre-award to development and accreditation. Contribute to and review system documents, including cybersecurity strategies, network architectures, and implementation plans. Leverage emerging technologies and processes to build resilient cyber defenses. Lead and participate in working groups involving multiple stakeholders and mission partners.

Basic Qualifications:

• 2+ years of experience with complex cybersecurity projects or programs
• 2+ years of experience using the Risk Management Framework (RMF) and with the Assessment and Authorization (A&A) activities needed to obtain and maintain an Authority to Operate (ATO)
• 2+ years of experience with the National Institute of Standards and Technology (NIST) and Committee on National Security Systems Instruction, including NIST SP 800-60, NIST SP 800-53, and CNSSI 1253
• Experience with identifying risk and developing mitigation plans, strategies, and methodologies
• Experience with assessment and authorization activities supporting organizational risk management decisions, including information security, vulnerabilities, and threats
• Experience with administering Red Hat Enterprise Linux or Windows Server 2008 or higher
• Experience with development of security assessment reports

Additional Qualifications:

• Experience with DoD or Navy cybersecurity projects or programs
• Experience with DoD and Navy acquisition programs and cybersecurity policies and frameworks, including RMF
• Experience with security tools and devices, including network firewalls, web proxy, intrusion prevention systems, vulnerability scanners, or penetration tools
• Ability to analyze and communicate complex technical challenges to both technical and non-technical clients and stakeholders
• Ability to communicate and integrate between multiple customer stakeholders
• Ability to apply subject matter expertise to system engineering documents, including technical requirements documents, interface control documents, and system specifications
• Possession of excellent verbal and written communication skills