Cyber Security Engineer

Job Description

Job Description

Seeking a Cyber Security Engineer to provide technical support to the Missile Defense Agency (MDA) Engineering Directorate Modeling & Simulation (M&S) office (DES) team supporting Objective Simulation Framework (OSF).

JOB REQUIREMENTS:

• Perform technical work utilizing the Risk Management Framework (RMF) process including analyzing and solving Information Assurance (IA)-related technical problems.
• Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
• Ensuring risk, compliance, and assurance efforts conform to Department of Defense (DoD) security, resilience, and dependability requirements at the software application, system, and network levels.
• Documenting preliminary or residual security risks for system operation.
• Verifying that the software application/network/system authorization and assurance documentation is current.
• Monitoring and evaluating a system's compliance with DoD security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyze the differences to identify impact and risks.
• Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls. Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
• Responsible for the operation of DOD tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
• Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
• Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites approximately 10% travel.
• Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.

Minimum Requirements:

• Bachelor's Degree in Computer Science, or a related field or equivalent experience. Experience may be used in lieu of degree.
• Candidates must comply with the experience, training, and certification requirements for Information Assurance Technical (IAT) Level II certification (e.g., Security + CE, CySA, CASP+, etc.) to satisfy DoD 8140 (DoD 8570.01) requirements upon employment.
• Must have experience with Red Hat Enterprise Linux operating systems.
• Working knowledge of DoD security policies and procedures.
• Self-starter that thrives in a dynamic environment and works well within a team environment.
• Effective oral and written communication skills for working within a team environment.
• Candidate must possess an understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), IAVAs or with DoD information assurance applications such as Assured Compliance Assessment Solution (ACAS) for vulnerability scans, network configuration assessments, and network discovery and Security Content Automation Protocol (SCAP)/Evaluate-STIG Validation Tool for validating system compliance.
• US Citizenship with the ability to obtain and maintain a Secret security clearance

Preferred Requirements:

• Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
• Linux certification e.g., Linux+, LPIC, Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE).
• Previous experience with the Missile Defense Agency elements, components, or equivalent system of system environments.