Cloud Cyber Engineer (Linux)

CACI•Sterling, VA

14d•$75,200 - $158,100

About The Position

CACI/BITS is seeking a Cyber Security Engineer to support the Makalu contract as part of a modern, fast-paced agile software development team. Cloud security engineers are integral to the development team and must adapt to program needs. The role reviews software, hardware, and infrastructure changes; follows the risk management framework to support system accreditation, continuous monitoring, and security mitigation; and maintains security documentation. The engineer also contributes to cyber monitoring, hardening, and response plans for a large program with multiple applications, and researches, designs, tests, and implements cybersecurity features for demanding environments. The position requires a holistic systems-level approach spanning software development, system administration, networking, and security. The engineer will help shape applications to meet elevated security requirements for systems that bridge security domains and help software engineers understand zero-trust architecture for a multi-releasability domain. The role supports the Makalu contract and requires an active TS/SCI clearance with Polygraph. Travel is up to 10% within the continental United States.

Requirements

Active TS/SCI clearance with Polygraph.
Five or more years of Linux/cloud-based development experience.
Bachelor's degree in information systems, systems engineering, electrical engineering, information technology, or a related field.
Five or more years of relevant experience, or seven or more years without a related degree.
Understanding of engineering in a development and operational environment.
Understanding of information assurance principles and organizational requirements.
Experience with Department of Defense or Intelligence Community system security control requirements.
Understanding of information security systems engineering principles and IT security technologies, such as firewalls, encryption, and proxies.
Experience with security.
Understanding of software development, system administration, networking, and security.

Responsibilities

Review audit logs and create mitigation and corrective action plans.
Use forensic tools to reconstruct attacks and determine how to correct vulnerabilities.
Work with development teams to create, maintain, and monitor data connections, NPE security certificates, and firewall connection requests.
Apply cloud, network, and security best practices to meet application goals while minimizing security risk.
Continually implement and improve the DevSecOps process in a Linux/cloud-based development environment.
Capture, refine, and assist in prioritizing requirements based on risk, engineering principles, and mission requirements.
Architect security infrastructure to protect against cyber attacks, and provide enhanced security architectures, development tools, and information systems to facilitate secure missions.
Provide Information System Owners guidance, clarify requirements, and identify options for technical security engineering.
Conduct capability-based security analysis of system security architectures, identify vulnerabilities, and recommend mitigation alternatives.
Participate in the design, development, and implementation of information systems to ensure compliance with required security features and safeguards.
Conduct security planning, assessment, risk analysis, risk management, certification, and awareness activities for system and networking operations.
Evaluate scan results and work with system developers and administrators to eliminate or mitigate findings.
Generate certification and accreditation documentation and artifacts, including System Security Plans and Network Interface Planning Documents, for import or upload to the SNOW tool.
Propose information-system categorization based on the types of information processed, in conjunction with DAO Representatives and ISOs.
Coordinate early with Security Control Assessors during engineering design, including coordination on security controls, tradeoffs, and related decisions.
Review software, hardware, and infrastructure changes; support system accreditation, continuous monitoring, security mitigation, and security documentation.
Help develop cyber monitoring, cyber hardening, and cyber response plans.
Research, design, test, and implement cybersecurity features.