Cybersecurity Engineer – Mid

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Assist in the creation and upkeep of security authorization packages.

• Aid in the execution of security control assessments (SCA) and prepare relevant documentation.

• Contribute to the development and maintenance of System Security Plans (SSPs).

• Monitor and manage Plans of Action and Milestones (POA&M) to ensure prompt remediation of findings.

• Engage in security impact analyses for system modifications and updates.

• Facilitate the implementation of security controls and assist with technical remediation activities.

• Support the execution of vulnerability assessments and document the findings.

• Maintain and refresh authorization documentation to assist in ATO and reauthorization processes.

• Support continuous monitoring (ConMon) efforts to ensure ongoing compliance.

• Collaborate with system owners, security teams, and stakeholders to adhere to cybersecurity requirements.

• Assist in formulating security policies, procedures, and standard operating procedures (SOPs).

• Contribute to Security Assessment Reports (SARs) and other compliance documentation.

• Participate in security working groups, meetings, and briefings as required.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.

• Over 4 years of cybersecurity experience, particularly in Assessment & Authorization (A&A) processes.

• At least 2 years of hands-on experience with NIST RMF and FISMA compliance requirements.

• Current Security+ certification or an equivalent like SSCP or GSEC.

• Capability to obtain and retain a Public Trust clearance.

• Must be a United States citizen.

• In-depth knowledge of the NIST Risk Management Framework (RMF) and FISMA requirements.

• Familiarity with NIST 800-53 and associated security control catalogs.

• Understanding of security control assessments and the A&A process lifecycle.

• Proficient in developing, maintaining, and reviewing security documentation including SSPs, POA&Ms, and SARs.

• Knowledge of security assessment and compliance tools such as eMASS, Xacta, and Archer.

• Familiarity with common security tools and technologies like Nessus and Qualys.

• Basic skills in risk assessment and security analysis.

• Excellent technical writing and documentation abilities.

• Strong verbal and written communication skills.

• Ability to work autonomously and collaboratively within a team.

• Additional certifications such as CASP+, CISSP (Associate), CAP, or CEH are preferred.

• Experience with classified systems or sensitive federal systems is preferred.

• Knowledge of Cloud Security principles and familiarity with FedRAMP compliance is preferred.

• Exposure to DevSecOps concepts, automated compliance, and security pipelines is preferred.

• Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework is preferred.

• Experience with continuous monitoring tools and techniques is preferred.

• Basic understanding of security architecture principles is preferred.

• Awareness of privacy requirements and related controls is preferred.

• Experience with documentation management systems like SharePoint and Confluence is preferred.

• Familiarity with agile development methodologies is preferred.

• Previous experience working in or supporting federal government contracts is preferred.

• Understanding of security testing methodologies, vulnerability scanning, and mitigation processes is preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Flexible working hours and remote work options.

• Opportunities for professional development and certifications.

• Collaborative and inclusive work environment.