Senior Cybersecurity Engineer / ISSO

About the role

Agil3 Technology Solutions (A3T) is seeking an experienced Senior Cybersecurity Engineer / Information Systems Security Officer (ISSO) to provide cybersecurity engineering, information assurance, vulnerability management, incident response, and security compliance support for the U.S. Government. The position will work closely with Government cybersecurity leadership and A3T's Systems, Network, Cloud, and Technical Support teams to maintain the confidentiality, integrity, availability, and security posture of the customer’s systems and services.

Responsibilities

• Perform ISSO/ISSM cybersecurity support functions for assigned systems and networks
• Implement and maintain cybersecurity policies, procedures, plans, technical documentation, and security artifacts
• Support implementation and sustainment of DoD and USMC cybersecurity requirements across enterprise IT systems
• Conduct cybersecurity engineering reviews and provide security recommendations for systems, applications, network infrastructure, and cloud services
• Implement, assess, and monitor DISA Security Technical Implementation Guides (STIGs) and applicable security configuration requirements
• Identify, document, track, and coordinate remediation of system and network vulnerabilities
• Monitor applicable vulnerability notifications and coordinate implementation of required security updates and corrective actions
• Support cybersecurity incident identification, reporting, response, investigation, and forensic activities
• Support and implement Zero Trust cybersecurity principles and requirements
• Operate, monitor, and support approved cybersecurity technologies, including Microsoft Defender and other Government-approved security tools
• Review system logs, security alerts, vulnerability findings, and other security information to identify potential cybersecurity threats or deficiencies
• Coordinate vulnerability remediation activities with Systems Administrators, Network Engineers, Cloud Engineers, and other technical personnel
• Support configuration and change-management activities to ensure proposed changes maintain the approved cybersecurity posture
• Review technical changes for cybersecurity impact and recommend appropriate security controls and mitigation measures
• Support System Authorization Access Request (SAAR) processes and other user-access security requirements
• Support Trusted Agent functions associated with approved token issuance and user-access processes, as authorized
• Maintain cybersecurity architecture, configuration, procedures, SOPs, and other required security documentation
• Track cybersecurity findings, remediation activities, exceptions, and corrective actions through closure
• Support security testing and validation following system upgrades, configuration changes, patches, and technology refreshes