Cyber A&A Engineer

Isys Technologies•Schriever AFB, CO

2d•$100,000 - $120,000•Onsite

About The Position

I2X Technologies is seeking a Cyber A&A Engineer to support ongoing activities for a customer in Colorado Springs, CO. This position will be on-site and will require an active Top Secret clearance. I2X Technologies is a reputable technology services company to the Federal Government. Whether the focus is on space exploration, national security, cyber security, or cutting-edge engineering applications, I2X is ready to offer you the chance to make a real-world impact in your field and for your country. We provide long-term growth and development. Headquartered in Colorado, I2X is engaged in programs across the country and in more than 20 states. Our programs support multiple Federal agencies, the Department of Defense and often focused on the space initiatives of our government customers.

Requirements

3+ years of related experience and may have post- secondary degree or training in a related discipline
Active Top Secret clearance required to start
IAT Level II/ IAM Level I DoD 8570 certification (Sec+ CE or equivalent)
Security engineering skills with a working knowledge of cybersecurity technology and DoD/Federal cybersecurity policy (i.e., DoDI 8500.01, NIST SP 800-53, etc.)
Understanding and utilization of Enterprise Mission Assurance Support Service (eMASS)
Understanding of Risk Management Framework (RMF) Cybersecurity Lifecycle to include: identifying controls and overlays, generating testable requirements, identifying resilient architecture design, configuring, running, and scripting audit tools, providing analysis of vulnerability analyses, conducting verification testing for compliance assessment
Knowledge of Software Assurance (SwA) static and dynamic code analysis (e.g. Fortify/SonarQube)
US Citizenship is required.

Nice To Haves

Windows and Red Hat Enterprise Linux (RHEL) system administration skills
Previous background working in a virtual environment
Previous background working with dockers and containers
Administer ACAS and ESS (formally HBSS)- Previous experience with ConfigOS

Responsibilities

Process and track DD Form 2875 user account forms and required training for privileged and non-privileged accounts, perform annual validation of accounts, and work with system administrator on creation, modification, and removal of accounts
Perform assessment of systems and networks within a virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy. This is achieved through passive evaluations such as compliance audits using STIG Viewer, SCAP, etc and active evaluations such as vulnerability assessments utilizing ACAS.
Perform Security Technical Implementation Guide (STIG) assessments and hardening for both Windows, Red Hat Enterprise Linux (RHEL) systems, and networking equipment utilizing ConfigOS
Develop test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks
Update Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated
Establish strict program control processes to ensure mitigation of risks and supports obtaining assessment and authorization of systems. Includes support of process, analysis, coordination, control certification test, compliance documentation, as well as investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Assist in the implementation of the required government policy (i.e., NISPOM, NIST, DoD), making recommendations on process tailoring, participating in and documenting process activities.
Perform analyses to validate established cybersecurity controls and requirements and to recommend cybersecurity safeguards
Support program test milestones through pre-test preparations, participating in the tests, analysis of the results, and preparation of required artifacts supporting authorization
Prepare artifacts such as Test Results (TR), Authorization Boundary Diagrams (ABD), Network Topologies, Flow-diagrams, Hardware and Software listings, Ports, Protocols, and Services Management documentation, supporting Assessment and Authorization activities and maintain the Plan of Actions and Milestones (POA&M)
Periodically conduct a complete review of each program support and operational system's audits and monitor corrective actions until all actions are closed
Coordinate across the program to address identified deficiencies during RMF assessment activities