Cyber Systems Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct analysis of cybersecurity requirements and engage in security systems engineering to incorporate new cybersecurity standards and uphold DTS’s security posture.

• Act as a point of contact for the DTS Program Management Office and customer technical SMEs regarding compliance with cybersecurity tools.

• Facilitate the integration of emerging cybersecurity demands within DTS program teams.

• Provide support for application security compliance, including workflows for Fortify and Sonatype in GitLab.

• Oversee application Plans of Actions and Milestones (POA&Ms) in Fortify SSC for release authorization.

• Aid in the automation of STIG checklist compliance and monitoring of remediation efforts.

• Utilize approved DoW AI resources to examine audit logs and vulnerability scan data, as well as to automate compliance procedures.

• Deliver status updates and compliance reports to leadership.

• Evaluate and communicate risks linked to new security requirements.

• Provide support for 24x7 operational environments, including flexible availability for weekends and after-hours as necessary.

⛳️ Requirements

• Must be a U.S. citizen.

• Must reside within the U.S.

• Must possess an active/current DoW Public Trust designation or an active Public Trust clearance.

• Must have a current, non-expired DoW 8140-approved Cybersecurity Certification: Security+ CE or CISSP.

• At least 12 years of experience with a BS/BA, 10 years with an MS/MA, 7 years with a Ph.D., or 16 years with a high school diploma.

• A minimum of 5 years performing cybersecurity requirements analysis and cybersecurity systems engineering in a DoW or similar environment.

• At least 5 years of experience in Linux systems administration.

• A minimum of 5 years working with Wireshark, tcpdump, packet captures, and network security compliance for firewalls, load balancers, IDS/IPS, WANs, LANs, VPNs, ports, and protocols.

• At least 5 years of experience integrating cybersecurity tools such as Trellix ESS, Tanium, ACAS, Nessus Network Monitor, or Splunk.

• A minimum of 5 years in vulnerability management of systems and network infrastructure using Nessus or ACAS.

• At least 5 years analyzing application security vulnerabilities.

• Minimum 5 years of experience with software development lifecycles, DevSecOps, and both on-premises and cloud environments.

• At least 5 years of experience completing and maintaining STIG checklists.

• Basic proficiency in reading Java, SQL, and shell scripts.

• Experience in translating customer security requirements into actionable program requirements.

• Strong technical writing capabilities.

• Excellent communication skills with the ability to interact with senior technical personnel.

• Ability to manage inter-team relationships, learn new technologies, prioritize tasks, meet deadlines, and work with minimal supervision.

• Capability to support workload surges and maintain a flexible schedule, including weekend and after-hours availability.

• Preferred: Experience with DoW Zero Trust, E-ICAM, Web Application Firewalls, cyber incident response, JFHQ/DCDC OPORDs and TASKORDs, project management, RMF/NIST SP 800-53, CMMC/NIST SP 800-171, SSAE-18/SOC-1, and AI cyberattack methods and mitigations.

🏝️ Benefits

• Target base salary ranging from $135,000 to $216,000 annually.

• Employees may qualify for overtime compensation.

• Employees may be eligible for shift differentials.

• Employees may receive a discretionary bonus.

• Opportunity for remote work.