Security Engineer Jr.

Saliense; Arlington (VA); Hybrid; USD 65,000 - 95,000; Full time

Benefits offered by this job

PTO & Sick Time

Health, Vision, Dental, and Life

401(k) with Tiered Match & Vesting

Parental Leave

Professional Development Reimbursement

Job summary

Saliense is seeking a Security Engineer Junior to support federal information systems security activities in Arlington, VA. The role emphasizes RMF, NIST CSF, POA&M management, system authorizations, configuration management, and system analysis.

The position requires onsite presence one day per week in Arlington, VA, and collaboration with developers, engineers, and managers to strengthen the customer's security posture.

Qualifications

• Minimum education BS/BA in a technology-related discipline.
• At least 1 year federal information systems security experience.
• Experience with RMF and applying the NIST Cybersecurity Framework.
• Solid knowledge of federal information system security policy and security control assessments.
• Experience with vulnerability assessment, risk assessment, network security, and security implementation.
• Knowledge of IT audit requirements and IT security standards.

Responsibilities

• Develop and execute test plans for internal control assessments (FISMA and OMB A-123).
• Gather, examine, and analyze artifacts related to security assessments and remediation.
• Document assessment activities and results for external review.
• Provide security expertise to ensure controls are implemented and documented.
• Conduct security product evaluations and recommend upgrades to improve security posture.

Skills

RMF

NIST CSF

POA&M management

System authorizations

Configuration management

System analysis

Vulnerability assessment

Risk assessment

Network security

CSAM

NIST SP 800-53

NIST SP 800-137

NIST SP 800-171

NIST SP 800-37

FISMA audits

Collaboration with developers

Networking concepts

Education

BS/BA in Computer Science, Information Systems, Engineering, Business, Physical Science, or related discipline

Tools

CSAM

Job description

At Saliense, we are committed to fostering a culture of continuous learning and professional growth. Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement. We offer competitive compensation and benefits, including:

• 20 Days PTO + 40 Hours of Paid Sick & Safe Time
• Health, Vision, Dental, and Life Insurance
• 401(k) with Tiered Match & 100% Vesting
• Parental Leave for Birthing and Non-Birthing Parents
• Professional Development Reimbursement Program

We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference. Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence. Visit www.saliense.com to learn more.

There are many more - connect with us to get a preview of the full benefits package.

About the role

The Security Engineer Junior supports work performed under the contract possessing a core set of knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis.

Possesses a solid knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis.

This position will require an onsite presence 1 day per week in Arlington, VA.

What you'll do

From a technical perspective the Security Engineer Junior is responsible for developing and executing test plans of the OMB Circular A-123 internal control assessments as well as FISMA internal control assessments. Determines, gathers, examines, and analyzes artifacts related to FISMA security control assessments and remediation verification. Documents all assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions. Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current. Conducts security product evaluations, and recommends products, technologies, and upgrades to improve the customer’s security posture.

Qualification

• Minimum Educational Requirements: BS/BA in Computer Science, Information Systems, Engineering, Business, Physical Science, or other technology-related discipline.
• Must have a minimum of one (1) year of federal information systems security experience.
• Technical Skills: Experience with RMF and applying the NIST Cybersecurity Framework.
• Solid knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis.
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Experience providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Experience using CSAM.
• Solid understanding and application of NIST Special Publications including SP 800-53, SP 800-137, SP 800-171, and SP 800-37.
• Solid understanding of FISMA audit requirements.
• Solid understanding of IT audit requirements.
• Ability to work cooperatively and at a technical level with developers, engineers, and managers on system teams.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Knowledge of risk management processes and tools (e.g., methods and tools for assessing and mitigating risks).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy in a federal environment.
• Knowledge of current and past cybersecurity threats and vulnerabilities.