Cyber A&A Engineer E4

Archarithms Inc•Colorado Springs, CO

3d•Hybrid

About The Position

Arcarithm is seeking a Cyber A&A Engineer E4 to join their team. This role involves working in a dynamic and challenging environment alongside customers such as Lockheed Martin, General Dynamics, Northrop Grumman, Raytheon, US Army, US Navy, US Air Force, the Missile Defense Agency, and NASA. The engineer will utilize cutting-edge technologies including machine learning, augmented and virtual reality, and big data analytics. Arcarithm fosters an environment of integrity, open communication, work-life balance, and career development, investing in employees with comprehensive health insurance, a generous 401K plan, competitive salaries, continuous career growth opportunities, flexible schedules including remote work, mentoring, and performance incentives.

Requirements

Generally has 3+ years of related experience and may have a post-secondary degree and/or certifications from a related discipline.
DoD final TS is required at start.
8140 Level II or higher required at start.
Solid Cybersecurity engineering skills with working knowledge of Cyber technologies, DoDI 8500.2 and Risk Management Framework (RMF) 800-53.
Excellent technical document preparation and verbal communication.
Thorough understanding of ACAS/SCC outputs.
Hands-on experience reviewing scan data, STIGs and RMF controls.
Experience with eMASS and the accreditation of Cross Domain Solutions (CDS).

Nice To Haves

Experience managing Cyber Tasking Orders (CTO)/IAVMs and POA&Ms.
Experience working with 3rd party assessors and auditors.
Experience performing self-assessments and analyzing STIGs.
Experience with the management & auditing of accounts.
Knowledge/Understanding of patch & configuration management of complex and disparate enterprise systems.

Responsibilities

Utilize Assessment & Authorization (A&A) background to analyze ACAS/SCC/ConfigOS scans and controls for continuous system Authorization.
Work in collaboration with C2BMC & external stakeholders to assess system vulnerabilities, account management, generate engineering responses for system POA&Ms, and conduct risk analysis for Risk Acceptance Requests (RARs).
Assist in the creation and maintenance of system packages in eMASS/Xacta.