Cyber Security Project Engineer

Armison Tech•Chantilly, VA

6d•Onsite

About The Position

Armison Tech is seeking an experienced Cyber Security Project Engineer to support a diverse set of goals across the organization. This role involves conducting technical risk assessments and providing technical risk mitigation guidance on the use of various enabling technologies. The engineer will provide subject matter expertise in technical risk analysis of enterprise and mission systems, IT systems and networks, mobile and wireless networks, cloud-based computing, and scripting or programming products. The position is located in Chantilly, VA, within an on-site client environment and requires an active TS/SCI with polygraph clearance.

Requirements

Must maintain active/current TS/SCI with a polygraph clearance.
Demonstrated experience analyzing IT systems for cyber security vulnerabilities.
Experience conducting technical risk assessments across IT systems, cloud platforms, and mobile networks.
Experience analyzing vulnerabilities with tools like Nmap, Wireshark, Metasploit and others, as well as experience recommending mitigations.
Experience evaluating system configurations, procurement processes, and software origins to determine and analyze security postures.
Experience documenting risks and threat vectors in structured reports for decision-makers.
Experience exploiting system vulnerabilities and simulating real-world attack scenarios to assess resilience.
Experience providing guidance on encryption, PKI, VPNs, and secure data transfer protocols.
Experience developing and maintaining SSPs, POA&Ms, and continuous monitoring plans.
Experience using tools like Xacta, ServiceNow, and RSA Archer to manage A&A artifacts.
Experience implementing Zero Trust Architecture and secure data lifecycle management.
Experience monitoring logs and alerts using Splunk, Rapid7, Nessus, and other security tools.
Must be a U.S. Citizen.

Responsibilities

Conducting technical risk assessments.
Providing technical risk mitigation guidance on the use of various enabling technologies.
Providing subject matter expertise in technical risk analysis of enterprise and mission systems, IT systems and networks, mobile and wireless networks, cloud-based computing, and scripting or programming products.
Analyzing IT systems for cyber security vulnerabilities.
Conducting technical risk assessments across IT systems, cloud platforms, and mobile networks.
Analyzing vulnerabilities with tools like Nmap, Wireshark, Metasploit and others, as well as recommending mitigations.
Evaluating system configurations, procurement processes, and software origins to determine and analyze security postures.
Documenting risks and threat vectors in structured reports for decision-makers.
Exploiting system vulnerabilities and simulating real-world attack scenarios to assess resilience.
Providing guidance on encryption, PKI, VPNs, and secure data transfer protocols.
Developing and maintaining SSPs, POA&Ms, and continuous monitoring plans.
Implementing Zero Trust Architecture and secure data lifecycle management.
Monitoring logs and alerts using Splunk, Rapid7, Nessus, and other security tools.