Cyber Assessment and Authorization Engineer (26-367)

Trace3•Colorado Springs, CO

19h•$104,000 - $122,400•Onsite

About The Position

The Cyber A&A Engineer will utilize their Assessment & Authorization (A&A) background to analyze ACAS, SCC, and ConfigOS scans and controls for continuous system authorization. The role works in collaboration with the program and external stakeholders to assess system vulnerabilities, account management, generate engineering responses for system POA&Ms, and conduct risk analysis for Risk Acceptance Requests (RARs).

Requirements

Generally has 3+ years of related experience.
May have a post-secondary degree and/or certifications from a related discipline.
DoD Final Top Secret clearance required at start.
8140 Level II or higher required at start.
Solid cybersecurity engineering skills with working knowledge of cyber technologies, DoDI 8500.2, and Risk Management Framework (RMF) 800-53.
Excellent technical documentation and verbal communication skills.
Thorough understanding of ACAS and SCC outputs.
Hands-on experience reviewing scan data, STIGs, and RMF controls.
Experience with eMASS.
Experience with the accreditation of Cross Domain Solutions (CDS).

Nice To Haves

Experience managing Cyber Tasking Orders (CTO), IAVMs, and POA&Ms.
Experience working with third-party assessors and auditors.
Experience performing self-assessments and analyzing STIGs.
Experience with the management and auditing of accounts.
Knowledge and understanding of patch and configuration management for complex and disparate enterprise systems.

Responsibilities

Analyze ACAS, SCC, and ConfigOS scans and controls for continuous system authorization.
Collaborate with the program and external stakeholders to assess system vulnerabilities.
Support account management activities.
Generate engineering responses for system POA&Ms.
Conduct risk analysis for Risk Acceptance Requests (RARs).
Assist in the creation and maintenance of system packages in eMASS/Xacta.