Senior Cyber Security Engineer

Cydaptiv; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

cyDaptiv Solutions is looking for a Senior Cyber Security Engineer to support Federal and DoD RMF-based projects in the Bethesda, MD area. You will lead A&A activities, assess configurations, and coordinate with system administrators to close security gaps.

The role requires DoD RMF expertise, hands-on use of NMAP/ACAS/Nessus/SCAP, and experience applying DoD STIGs and IAVM patches. A Secret clearance is required, with onsite work in Bethesda, MD.

Qualifications

• 7 years of relevant experience in Federal and DoD network environments.
• 4 years of experience supporting DoD RMF and implementation of technical controls.
• Meet DoD 8570/8140 certification requirements for IAT Level II (CCNA Sec, GISCP, GSEC, Security+ CE, CND, or SSCP).
• Hands on experience with tools such as NMAP, ACAS/Nessus, and SCAP, and STIGViewer.
• Strong written and verbal communications skills to provide IA / cybersecurity guidance to project stakeholders.
• Ability to work independently with minimal supervision.

Responsibilities

• Implementing the DoD Assess and Authorize (A&A) process IAW DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT).
• Ability to manage RMF Activities in eMASS.
• Assess systems using automated tools such as ACAS / Nessus, and Security Content Automation Protocol (SCAP), and Manual STIG reviews.
• Experience testing and implementing DoD STIGs and devising mitigation strategies, applying Information Assurance Vulnerability Management (IAVM) patches to systems and complete security compliance scans upon applying patches or updates to the system.
• Experience drafting Architecture Diagram, Hardware Software Inventory List, Ports Protocols Services Registration, and Data Flow diagram.
• Introduce new team members to project tasks and expectations.
• Additional details of the position will be provided to qualified applicants.

Skills

Independent worker

Strong communication

Stakeholder coordination

Education

Bachelor’s degree in Computer Science/Information Systems/Engineering

Tools

NMAP

ACAS/Nessus

SCAP

STIGViewer

eMASS

Job description

Overview

cyDaptiv Solutions is seeking a Senior Cyber Security Engineer (CSE) with experience supporting Federal and DoD cyber security and information assurance projects. The CSE must have knowledge of the Risk Management Framework (RMF), security principles, concepts, policies and regulations and be able to identify risks in information systems and work with system administrators and engineers to resolve security weaknesses.

The successful candidate will have experience assessing security control implementation and system configurations using automated tools and manual check lists; determining compliance/risk severity; recommending remediations; and have ability / skillset to implement fixes. The candidate must also have experience working with stakeholders at various organizational levels and be able to manage and coordinate assessment activities in a collaborative manner.

Cyber Security Engineer (CSE) Responsibilities:

• Implementing the DoD Assess and Authorize (A&A) process IAW DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT).

• Ability to manage RMF Activities in eMASS.

• Assess systems using automated tools such as ACAS / Nessus, and Security Content Automation Protocol (SCAP), and Manual STIG reviews.

• Experience testing and implementing DoD STIGs and devising mitigation strategies, applying Information Assurance Vulnerability Management (IAVM) patches to systems and complete security compliance scans upon applying patches or updates to the system.

• Experience drafting Architecture Diagram, Hardware Software Inventory List, Ports Protocols Services Registration, and Data Flow diagram.

• Introduce new team members to project tasks and expectations.

• Additional details of the position will be provided to qualified applicants.

Required Qualifications:

• Bachelor’s degree or higher in Computer Science, Information Systems/Technology or engineering discipline preferred.

• Strong technical understanding of the network and systems operations in secured DoD environments.

• Strong understanding of SDLC process in a DoD environment.

• Hands on experience with tools such as NMAP, ACAS/Nessus, and Security Content Automation Protocol (SCAP), and STIGViewer.

• Experience using DoD SRGs/STIGs and other manual system configuration review methods, developing mitigation strategies, applying systems and vulnerability patches.

• Strong written and verbal communications skills to provide IA / cybersecurity guidance to relevant project stakeholders.

• Ability to work independently with minimal supervision.

Experience

• 7 years of relevant experience in Federal and DoD network and computing environments.

• 4 years of experience supporting DoD Risk Management Framework (RMF) and implementation of technical controls.

• Meet DOD 8570/8140 certification requirements for IAT Level II. Includes: CCNA Sec, GISCP, GSEC, Security+ CE, CND, or SSCP.

Job Type

• Full-time

• Onsite - Bethesda, MD

Security Clearance

• Active Secret or clearable at the Secret Level