Cybersecurity Engineer, Clearance Required

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist in the modernization of platform infrastructure for an Army program by implementing secure, scalable, cloud-enabled systems.

• Act as a cybersecurity consultant to the Information System Security Manager, System Owners, and technical engineering teams.

• Oversee the maintenance of the system security authorization package within eMASS.

• Prepare and sustain RMF artifacts, which include the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and relevant control evidence.

• Curate and verify evidence for the transition from NIST SP 800-53 Revision 4 to Revision 5, along with the ongoing implementation of security controls.

• Develop, monitor, and revise POA&Ms in eMASS and internal ticketing systems.

• Collaborate with System Owners, Cloud Architects, System Engineers, and System Administrators to establish remediation timelines, risk mitigation statements, and resource requirements.

• Evaluate noncompliance closures and remediation evidence prior to approval from the ISSM and Authorizing Official.

• Analyze the technical and operational effects of mandated cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries.

• Conduct evaluations and reviews of DISA STIGs and Security Requirements Guides utilizing STIG Viewer and automated compliance tools.

• Incorporate vulnerability analysis, secure configuration validation, and DevSecOps activities into GitLab CI/CD and Agile workflows.

• Facilitate continuous monitoring and vulnerability assessments using ACAS and associated tools.

• Manage cybersecurity dashboards and monitor POA&M aging, vulnerability trends, operational security incidents, incident responses, and change approvals.

⛳️ Requirements

• Possession of an active Secret security clearance.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.

• A minimum of 5 years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.

• Active DoDI 8140 qualification.

• Deep understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures.

• Proficient in developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a similar authorization workflow.

• Hands-on experience with the application of NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or maintenance.

• Background in cloud security operations, vulnerability management, or security monitoring within AWS or other cloud environments.

• Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning.

• Excellent communication skills with experience collaborating with technical and program stakeholders to address findings and meet deadlines.

• Experience supporting Army or DoD programs is preferred.

• Practical experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD is preferred.

• Background in containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines is preferred.

• Familiarity with SAFe or another Agile framework and incremental delivery cycles is preferred.

• Must be a U.S. citizen or eligible for a U.S. Government security clearance.

🏝️ Benefits

• Comprehensive health insurance options.

• Competitive salary with potential for overtime.

• Opportunities for professional development and training.

• Flexible work schedule and work-from-home options.

• Retirement savings plans with employer matching contributions.