Lead Cybersecurity Engineer/Scientist w/Secret Clearance

Responsibilities

• Serve as Lead Technical Engineer for cybersecurity assessment and authorization execution
• Lead implementation of RMF controls across systems, enclaves, and sites
• Develop and maintain Security Assessment Plans (SAP)
• Develop cybersecurity test procedures aligned to NIST and DoD guidance
• Conduct security control assessments across technical, operational, and management controls
• Perform Independent Verification & Validation (IV&V) testing activities
• Conduct vulnerability assessments using ACAS, HBSS, and related tools
• Analyze vulnerability scan results and identify remediation actions
• Develop Security Assessment Reports documenting findings and recommendations
• Perform reassessment of remediated controls and update test results
• Provide technical leadership for RMF package development
• Support creation of SSP, SAR, POA&M, and supporting artifacts
• Conduct system security architecture reviews
• Evaluate enclave and system boundary definitions
• Perform risk assessments and residual risk analysis
• Support development of authorization packages in eMASS
• Provide technical validation of RMF artifacts
• Support validation readiness review activities
• Support IV&V test event planning and execution
• Provide technical oversight of STIG implementation
• Develop cybersecurity test matrices and validation procedures
• Support automated tool development for cybersecurity testing
• Analyze ACAS data and generate vulnerability reports
• Support automation of STIG assignment and test planning
• Provide cybersecurity engineering support for DHA toolsets
• Support development of dashboards and reporting metrics
• Provide technical guidance to cybersecurity analysts and engineers
• Support network, server, and application security testing
• Support encryption, authentication, and boundary security reviews
• Participate in technical review boards and working groups
• Support continuous monitoring and risk scoring activities
• Provide technical briefings to Government stakeholders
• Support CONUS and OCONUS site cybersecurity assessments
• Support cybersecurity documentation and reporting deliverables

Qualifications

• Experience 15 years DoD engineering/cybersecurity; managerial experience required
• RMF lifecycle implementation experience
• STIG validation experience
• IV&V cybersecurity testing experience
• eMASS experience
• Vulnerability assessment experience
• Enterprise network security experience
• Demonstrated experience supporting government agencies, customers, or contracts within federal environments
• Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable
• IAM Level III Certification preferred (e.g., CISSP, CISM, CASP, GSLC, CCISO)
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related discipline
• Secret clearance (ability to obtain TS preferred)