DoD Cybersecurity Engineer: SDLC & Threat Mitigation

Metova Federal; Orlando (FL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical coverage

Wellness program

401(k) Matching

Disability Insurance

Employee Assistance Program

Life Insurance

Education & Training

Generous Leave Policy

Job summary

By Light Professional IT Services LLC (CESI) seeks a cybersecurity engineer to support DoD software development with security requirements definition and testing. You will assess cybersecurity requirements, apply secure development practices, and interface with software teams to ensure proper security engineering throughout the lifecycle.

Preferred candidates hold IAT II level certifications, DoD RMF familiarity, and experience with offensive security tools and vulnerability management.

Qualifications

• Bachelor's Degree in Computer Science, Engineering, Cybersecurity, IT or related field required; professional and/or military experience may be substituted in lieu of degree.
• This position requires certifications necessary to meet IAT Level II in accordance with DoD 8140 baseline certifications.
• Experience in software engineering, development and/or systems engineering throughout all phases of the system development lifecycle.
• Systems administration skills, experience with Linux, security settings, services, hardening of systems (STIGs, security policies); any shell scripting or Python a plus.
• System troubleshooting, recovery, and advisory in the event of unexpected adverse configuration changes.
• Knowledge of threat assessment and solutions to mitigate or eliminate such threats.
• Experience with offensive security tools and adversarial techniques and methods.
• Experience implementing software application solutions to comply with NIST SP 800-53 security controls.
• Compliance and vulnerability reporting and similar formal technical documentation skills.
• Understanding of Risk and Compliance Frameworks.

Responsibilities

• Define cybersecurity requirements for software applications to meet program requirements and objectives.
• Provide recommendations to incorporate security engineering practices throughout the system development lifecycle.
• Perform assessments of cybersecurity requirement compliance using manual and automated software analysis tools and methods and present them to the customer as necessary.
• Perform assessments using adversarial tools, techniques, and methods against network-enabled applications and web applications to identify weaknesses, gaps, and vulnerabilities.
• Propose mitigation and countermeasures to reduce or eliminate software-level threats.
• Directly interface with the software development team to ensure software security engineering principles are applied throughout the system development lifecycle.

Skills

Linux

Shell scripting

Python

Security testing

Threat assessment

Offensive security tools

System hardening

DoD 8140 IAT II

RMF

NIST SP 800-53

Education

Bachelor's degree in CS/Engineering/Cybersecurity/IT

Tools

STIGs

Vulnerability scanning tools

Job description

By Light Professional IT Services LLC (CESI) seeks a cybersecurity engineer to support DoD software development with security requirements definition and testing. You will assess cybersecurity requirements, apply secure development practices, and interface with software teams to ensure proper security engineering throughout the lifecycle.

Preferred candidates hold IAT II level certifications, DoD RMF familiarity, and experience with offensive security tools and vulnerability management.