Senior Cybersecurity Engineer – Information System Security Engineer

This is a fully remote position, open to applicants in Missouri.

📋 Description

• Implement and uphold technical security measures in accordance with the NIST Risk Management Framework and NIST SP 800-53.

• Assist in Information Security Continuous Monitoring activities following NIST SP 800-137.

• Offer engineering support throughout the RMF authorization lifecycle and evaluate the effectiveness of security controls.

• Create corrective actions for identified weaknesses in security controls.

• Maintain System Security Plans, control implementation statements, assessment evidence, and Plans of Action and Milestones (POA&Ms).

• Assess system changes for potential cybersecurity impacts and uphold approved security configuration baselines.

• Provide technical evidence and remediation assistance for Authority to Operate (ATO) activities.

• Manage Tenable Nessus and Tenable Security Center, including scanners, repositories, policies, credentials, and reporting functionalities.

• Conduct both authenticated and unauthenticated vulnerability assessments while prioritizing remediation efforts.

• Coordinate vulnerability remediation and confirm its effectiveness through follow-up scans.

• Apply DISA STIGs and SRGs, and perform automated and manual compliance assessments.

• Develop and sustain secure configuration baselines while investigating any configuration deviations.

• Administer and troubleshoot Host-Based Security System (HBSS) and successor endpoint security technologies, including Trellix/McAfee ePO.

• Oversee endpoint security policies, agent deployments, updates, health monitoring, and alert systems.

• Administer, secure, patch, harden, and troubleshoot RHEL and Microsoft Windows Server systems.

• Support configuration management, change control processes, technical documentation, and secure enterprise operations.

• Aid in AWS security compliance, vulnerability management, identity and access management, monitoring, and configuration assessments.

• Identify and correct cloud security misconfigurations while facilitating on-premises/cloud security integration.

• Collaborate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), system administrators, network engineers, infrastructure teams, and system owners.

⛳️ Requirements

• A minimum of 10 years of relevant professional experience in cybersecurity engineering, information assurance, vulnerability management, or enterprise security operations.

• Experience in supporting DoD, federal government, or similarly regulated enterprise environments.

• Practical experience in conducting vulnerability assessments, implementing security measures, and addressing technical security findings.

• Proficiency in administering, configuring, and securing enterprise Windows and Linux systems.

• Experience in supporting RMF compliance, continuous monitoring, and security authorization activities.

• Strong knowledge of enterprise infrastructure, operating system security, endpoint protection, and vulnerability management principles.

• A current CompTIA Security+ certification is mandatory.

• A current AWS certification is required, such as AWS Certified Solutions Architect, AWS Certified SysOps Administrator, AWS Certified Security – Specialty, or another relevant AWS certification.

• Must fulfill applicable DoD 8140 qualification requirements for the specified cybersecurity work role and proficiency level.

• Top Secret (TS) security clearance is necessary for full performance; candidates with an active Secret clearance may be considered if eligible and willing to pursue the TS process.

• Proven experience with NIST RMF, NIST SP 800-53, NIST SP 800-137, DISA STIG/SRG, eSTIG, SCAP, Tenable.sc, Tenable Nessus, HBSS, RHEL, Windows Server, AWS security, and technical compliance documentation.

• Familiarity with Trellix/McAfee ePO and enterprise endpoint security management.

• Experience in automating configuration, compliance assessments, and remediation using Ansible, PowerShell, Bash, or similar technologies.

• Knowledge of AWS security services and federal cloud compliance requirements.

• Experience in developing vulnerability metrics, compliance dashboards, and technical security reports.

• Understanding of enterprise networking, firewall configurations, and network security principles.

• Additional certifications such as CISSP, CompTIA SecurityX, CySA+, RHCSA, or AWS Certified Security – Specialty are preferred.

🏝️ Benefits

• Competitive salary.

• Medical, dental, and vision insurance.

• Life and disability insurance.

• Voluntary critical illness, hospital, and accident benefits.

• Health savings accounts (HSAs).

• Flexible spending accounts (FSAs).

• Retirement 401(k) plan.

• Paid leave programs.

• Flexible work-life balance.

• Opportunities for professional development.

• Performance and recognition programs.

• A collaborative work environment.

• Hiring preference for Seneca or Native individuals.