Cyber Security Engineer

Edgesource Corporation•Chantilly, VA

23h•Hybrid

About The Position

Edgesource is seeking a highly qualified and technical Cyber Security Engineer to conduct Assessment and Authorization (A&A) for multiple critical mission systems. You will work with software, cloud, and security engineers to ensure applications and systems are developed to meet required security controls, as well as to promote proper security configurations in private and public clouds. You are excited by automation and implement continuous security and performance testing to monitor health of software and systems. You understand why security should be “baked-in”, and ensure findings are fed back in as improvements to the design and architecture. As a Mid-Level Cybersecurity Engineer, you will work under direction the of Cybersecurity Lead and be responsible for ensuring the security and protection of our client’s digital assets, networks, and systems. This role can support a hybrid work schedule, with duties being performed 3-4 days per week onsite in the Chantilly, VA area.

Requirements

At least 5 years of experience in designing, implementing, or engineering production-scale applications in regulated, secure environments
At least 5 years of direct experience with and strong working knowledge of FISMA and NIST Information Security Guides
At least 5 years of direct experience managing the security authorization and accreditation process for information systems
Familiarity with DevOps principles, CI/CD pipelines, containers, and related best practices for cloud deployments
Demonstrated experience working with cloud native and containerized technologies
Strong analytical and problem-solving skills
Excellent communication and collaboration skills
Ability to work independently and as part of a team
Certifications to satisfy IAM/IAT Level II Requirements
Active TS/SCI security clearance

Nice To Haves

Experience working in a large software development program using Agile methodologies.
Familiarity with container orchestration and management tools.
Familiarity with Infrastructure as Code tools.
Experience with Continuous Monitoring tools.

Responsibilities

Engineer, implement and monitor security measures for the protection of cloud application systems, networks and information
Generate and maintain the complete security body of evidence (BoE) while leading the A&A activities according to the Risk Management Framework (RMF)
Support the technical planning, configuration, integration, verification and validation of pipelines and associated toolchains
Propose mitigation strategies for vulnerabilities identified in the system
Provide infrastructure related solution architecture support
Work with application engineers to streamline CI/CD pipeline build tools
Provide technical engineering services for the support of integrated security systems and solutions
Collaborate with other IT and security teams to implement security best practices and ensure compliance with industry standards and regulations
Stay up to date with emerging security trends and technologies.