Cyber Security Engineer

Torch Technologies, Inc.•Huntsville, AL

1d•Onsite

About The Position

Torch Technologies is seeking a dedicated Cyber Security Engineer to join our Objective Simulation Framework (OSF) Infrastructure team. In this role, you will provide critical technical expertise for the Modeling & Simulation (M&S) integration of real-time Hardware-in-the-Loop (HWIL) architectures. Your work will directly secure and enable Missile Defense Agency (MDA) ground tests, flight tests, and other advanced HWIL events.

Requirements

U.S. Citizenship
Bachelor’s degree in computer science, Engineering, Information Systems, or related field (equivalent professional experience considered)
4+ years of related experience.
Active SECRET security clearance with ability to obtain and maintain TS/SCI
Experience with Red Hat Enterprise Linux operating systems.
Working knowledge of DoD security policies and procedures.
Self-starter that thrives in a dynamic environment and works well within a team environment.
Effective oral and written communication skills for working within a team environment.
Candidate must possess an understanding of Enterprise Mission Assurance Support Service (eMASS), Security Technical Implementation Guides (STIG's), IAVAs or with DoW information assurance applications such as Assured Compliance Assessment Solution (ACAS) for vulnerability scans, network configuration assessments, and network discovery and Security Content Automation Protocol (SCAP)/Evaluate-STIG Validation Tool for validating system compliance.
Candidates must comply with the experience, training, and certification requirements to satisfy DoD 8140 (DoD 8570.01) Information Assurance Technical (IAT) level III and Information Assurance Management (IAM) Level III Certification upon employment (e.g., CISSP, CISM)

Nice To Haves

Knowledge of ACAS, NESSUS, Elastic, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF package development.
Support Stakeholders in the operation of the comprehensive Elastic platform in terms of know-how and the technologies used.
Linux certification e.g., Linux+, LPIC, Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE).
Previous experience with the Missile Defense Agency elements, components, or equivalent system of system environments.

Responsibilities

Perform technical work utilizing the Risk Management Framework (RMF) process including analyzing and solving Information Assurance (IA)-related technical problems.
Utilizing best practices and methods for monitoring, auditing, and measuring risk, compliance, and assurance efforts.
Ensuring risk, compliance, and assurance efforts conform to Department of War (DoW) security, resilience, and dependability requirements at the software application, system, and network levels.
Documenting preliminary or residual security risks for system operation.
Verifying that the software application/network/system authorization and assurance documentation is current.
Monitoring and evaluating a system's compliance with DoD security, resilience, and dependability requirements including performing validation steps, comparing actual results with expected results and analyzing the differences to identify impact and risks.
Provide an accurate technical evaluation of the software application, system, or network, documenting the security posture, capabilities, and vulnerabilities against applicable NIST controls. Recommending new or revised security measures and countermeasures based on risk analysis then verifying that security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations.
Responsible for the operation of DoW tools, security monitoring and auditing solution utilizing a COTS product i.e. (Elastic, Endpoint Security Solutions (ESS), etc.) and industry wide best practices.
Conducts regular audits to ensure that systems are being operated securely, and information systems security policies and procedures are being implemented as defined in the security plan.
Conduct annual inspections to validate system updates, configuration compliance utilizing technical scans, and physical observations at domestic and foreign sites approximately 10% travel.
Data collection, documentation and reporting on all the above responsibilities as required. Perform other duties as assigned to realize mission success.