Cybersecurity Engineer (Mid-Level) - 26-025 - Hybrid

AUSGAR Technologies Inc; San Diego (CA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Job summary

AUSGAR Technologies, Inc. is seeking a Mid-Level Cybersecurity Engineer to join our Navy program in the Old Town area of San Diego. This hybrid role requires strong DoD cyber expertise and the ability to design, implement, and assess security across the system development lifecycle.

You will conduct scans, evaluate STIGs/SCAP, remediate findings, and contribute to RMF effort to achieve ATO/IATT, while collaborating with developers and analysts in a fast-paced government contractor environment.

Qualifications

• Active Secret clearance required.
• DoD 8140.03 IAT II certification required.
• Bachelor's degree in relevant discipline and 5+ years in cybersecurity or equivalent experience.

Responsibilities

• Plan and execute cyber requirements throughout the system lifecycle.
• Review system architecture for cybersecurity vulnerabilities and compliance.
• Perform ACAS/Nessus scans and remediate vulnerabilities with engineers.
• Develop POA&Ms, SAPs, and support RMF/ATO/IATT processes.
• Create system diagrams and data flow diagrams as needed.

Skills

Active Secret Clearance

IAT II certification

Education

Bachelor's degree in relevant discipline

Tools

Jira

eMASS

Nessus

ACAS

SCAP

VRAM

Job description

JOB TYPE: FULL-TIME

MUST HAVE AN ACTIVE SECRET CLEARANCE UPON HIRE TO BE CONSIDERED.

WE USE E-VERIFY TO ELECTRONICALLY CONFIRM THE EMPLOYMENT ELIGIBILITY OF NEWLY HIRED EMPLOYEES.

COMPETITIVE SALARY, COMPREHENSIVE BENEFITS AND A COMPANY THAT CARES!

THIS IS A HYBRID POSITION. APPROXIMATELY 60% ONSITE/40% REMOTE.

AUSGAR Technologies, Inc., an equal opportunity employer, is an established, Service-Disabled Veteran-Owned Small Business (SDVOSB) Department of Defense, government contractor with core competencies in Information Assurance, Cybersecurity and Systems Engineering. With offices on both the East and West coasts, an inviting culture and above-standard benefits, opportunity abounds for the right individual!

Mid-Level Cybersecurity Engineer 26-025 Hybrid

As a growing Department of Defense Contractor, AUSGAR Technologies has an exciting NEW opportunity for a Mid-Level Cybersecurity Engineer to join our team of smart and innovative technical team members in the Old Town area of San Diego.

Serve as a Mid-Level Cybersecurity Engineer for a Navy program office to support implementation and integration of cyber requirements throughout all stages of the system development lifecycle to include requirements gathering, system engineering, deployment and sustainment. This position will include reviewing system architecture to identify cybersecurity vulnerabilities and compliance issues. Work to plan and execute cybersecurity scans to include running Assured Compliance Assessment Solution (ACAS)/Tenable Scans, DISA Security Technical Implementation Guides (STIGs), evaluate STIG, DISA Security Content Automation Protocol (SCAP) and evaluate system against vendor security best practices. Work with the system developers to remediate and mitigation vulnerabilities on the system. Develop system architecture diagrams and data flow diagrams as required. Develop Security Plan of Action and Milestones (POA&Ms) to include the development of mitigations statements. Support the Cybersecurity Analyst as needed for the Risk Management Framework (RMF) process to achieve Authority to Operate (ATO) and Interim Authority to Test (IATT).

• Plan and execute system scans to meet client requirements, analyze results, develop reports to be used to determine system vulnerabilities and risk posture and provide recommendations for remediation to achieve desired security and risk posture.
• Identify cybersecurity vulnerabilities and compliance issues.
• Work with engineers to remediate existing vulnerabilities or to help develop mitigations that minimize impact, likelihood or risks and work with the program to incorporate findings into the system POA&M.
• Experience with Vulnerability Remediation Asset Manager (VRAM) preferred, processing Boundary Change Requests (BCRs) and participating in ad hoc cybersecurity data calls.
• Provide Cybersecurity Assessment and Authorization (A&A) support and serve as a cybersecurity expert for the program throughout all stages of the acquisition, system engineering and maintenance process.
• This includes successfully executing RMF assessment process, development of Security Assessment Plans (SAPs), conducting assessments, executing and compiling assessment results for client security assessment reports.

Requirements

The physical demands and work environment described here are representative of those that must be met by an employee to successfully perform the essential functions of the job. Reasonable accommodations may be made to individuals with disabilities to perform the essential functions.

• Active Secret clearance required.
• DoD 8140.03 IAT II certification required.
• Bachelor's degree in relevant discipline from an accredited college/university and 5+ years in the cybersecurity field required or the equivalent combination of work experience and education.
• Must have experience developing Security Assessment Plans (SAPs), development of Security POA&Ms and development of Security Assessment Reports (SARs).
• Must have experience conducting Nessus and ACAS scans.
• Experience building ACAS scanner preferred.
• Must have experience conducting DISA STIG and SRGs on multiple technologies.
• Experience with evaluate STIG preferred.
• Experience with SCAP preferred.
• Experience with implementing security lockdowns for Windows or Red Hat Linux (RHEL) operating systems, network technologies, including firewalls, routers and switches.
• A good knowledge of Department of War (DoW) cybersecurity policies and procedures.
• Experience using eMasster and eMASS preferred
• Experience in using Jira to create, manage and update work items, including user stories, epics, tasks and bug reports preferred.
• Employ strong written and verbal communication skills to advise various levels of technology stakeholders, program initiatives and accrediting authorities on security requirements and cybersecurity trends and solutions, to include risk assessments and mitigations
• Must be able to work independently and be a self-starter.

Salary Range: $120K-$160K

Based on your qualifications, you will be placed in Level I-V.

An essential qualification for this position is successfully obtaining a security clearance issued by the Federal Government, which may require successful completion of a background check.

We use E-Verify to electronically confirm the employment eligibility of newly hired employees.

AUSGAR's salary range is dependent upon a variety of factors, which include experience, skills, education, certifications and geographical location. Our salary range includes a base salary and excellent benefits package as part of our total compensation.

AUSGAR Technologies, Inc. is an equal opportunity employer. If you are a qualified individual with a disability or a disabled veteran and need assistance in completing the application, you have the right to request reasonable accommodation. Please e-mail us at [e-mail] if you are unable or limited in your ability to use or access www.ausgar.com careers page as a result of your disability.

PI287068173