Secret Cybersecurity Engineer

Insight Global; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Insight Global is seeking a cybersecurity engineer to support a large government customer. Responsibilities include applying security controls, conducting data reconnaissance, and developing SSP/SAP/SAR documentation.

The candidate should have 5+ years of cybersecurity experience, familiarity with POAMs, and an Active Secret Clearance, with IAM level II or higher and related certifications (CASP, CAP, CISMCISSP, GSLC).

Qualifications

• 5+ years of cybersecurity focused experience.
• Experience with Network Monitoring tools.
• Strong understanding of POAMs and security controls.
• Active Secret Clearance required.

Responsibilities

• Test and apply security controls based on security categorization and tailoring.
• Conduct both active and passive reconnaissance of data and author Plans of Milestones and Actions (POA&Ms) with mitigations.
• Develop required A&A documentation: SSP, SAP, SARs, etc.
• Adhere to eMASS tasks in the accreditation cycle, IV&V, STIG checks, ASR, POA&M updates, and resubmission for ATO/ATC/IATT.
• Maintain DISA circuit connections and accreditation workflows.

Skills

Cybersecurity experience

Network monitoring

POAMs & security controls

Active Secret clearance

Tools

eMASS

SSP/SAP/SAR docs

Job description

Job Description

Insight Global is seeking a cybersecurity engineer to support a large government customer. Responsibilities include:

• Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
• Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
• Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
• Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
• Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations.

Skills and Requirements

Active Secret Clearance5+ Years of experience of Cybersecurity focused experienceExperience with Network Monitoring toolsStrong understanding of POAM's and security controlsIAM level II or higher (IAM Level II (one of the following)CASPCAPCISMCISSP (or Associate)GSLC

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].