Cybersecurity Systems Engineer

Responsibilities

• Designing and implementing cybersecurity controls across cloud, hybrid, and mission system environments including identity, access control, and monitoring.
• Create, update, and maintain required Body of Evidence (BOE) documentation, RMF/ATO artifacts, and security control documentation in alignment with ICD 503 and NIST RMF.
• Maintain, update, and conduct routine vulnerability scanning, log analysis, and security event reviews across all systems.
• Maintain system baselines and configuration management items to ensure systems are hardened and compliant with required DISA STIGs.
• Integrate security into CI/CD pipelines and DevSecOps environments using automated scanning, policy enforcement, and Infrastructure as Code (IaC).
• Implement and enforce Zero Trust security principles, identity-centric access controls (RBAC/ABAC), and data protection aligned with the DoD Data Strategy (VAULTIS).
• Work with all stakeholders to ensure complete and functioning systems that meet security requirements while supporting rapid deployment of AI/ML workloads.

Requirements

• Bachelor's degree in Cybersecurity or a related field and 8+ years of progressively responsible experience in Information Systems Security (additional experience may substitute for degree).
• Significant experience navigating the Sponsor's accreditation process and ICD 503 requirements, especially as it relates to creating A&A Body of Evidence (BOE) documentation.
• Significant experience meeting security requirements, implementing controls, and performing vulnerability scanning in the Sponsor's environment or similar environments.
• Experience working across a large team to drive a security agenda and working with complex, intertwined systems, data flows, and CI/CD pipelines.
• Experience inventorying complex networks and creating documentation for security compliance, configuration management, and centralized authentication.
• Experience creating, maintaining, and communicating complex information technology documentation, particularly regarding Zero Trust principles and data system security.
• Must meet DoD 8140 (formerly 8570) baseline certification requirements, such as Security+, CySA+, or CISSP.

Qualifications

• Must hold an active Secret security clearance and the ability to obtain and maintain a TS/SCI.

Physical Requirements

• Must be able to remain in a stationary position 50%.
• Frequent communication with co-workers, management, and customers, which may involve delivering presentations.
• Must be able to exchange accurate information in these situations.