1756 - Cybersecurity Engineer

Sigma Defense•Rome, NY

21d•Onsite

About The Position

Sigma Defense is seeking a Cybersecurity Engineer to join our team in Rome, NY. This position will work closely with a Senior ISSE and other engineering personnel to implement cybersecurity requirements, perform vulnerability assessments, support Risk Management Framework (RMF) activities, and improve the automation of security and compliance processes. The ideal candidate has a foundation in cybersecurity engineering and DoD security requirements and is looking to expand hands-on experience with ACAS, Zero Trust, Microsoft Azure security, Azure Policy, Xacta, infrastructure automation, and Microsoft Defender for Cloud.

Requirements

5+ years of cybersecurity engineering experience to support the implementation, assessment, and automation of cybersecurity controls across information systems and Microsoft Azure cloud environments.
Must be a U.S. citizen.
CompTIA Security+ Certification
Certified Information Systems Security Professional (CISSP) Certification
Proficiency with Microsoft Defender for Cloud
Proficiency with Assured Compliance Assessment Solution (ACAS)
Proficiency with Xacta
Candidate must possess or have the ability to obtain an active TS/SCI security clearance. Clearance may be sponsored for the right candidate.
Associate's degree from an accredited college or university in Cybersecurity Engineering or related field of study.

Nice To Haves

Foundation in cybersecurity engineering and DoD security requirements
Hands-on experience with ACAS, Zero Trust, Microsoft Azure security, Azure Policy, Xacta, infrastructure automation, and Microsoft Defender for Cloud.

Responsibilities

Work alongside senior cybersecurity engineers to implement and maintain security controls throughout the system lifecycle.
Support cybersecurity requirements in accordance with the DoD Risk Management Framework (RMF).
Assist with implementation of Zero Trust security principles across systems, applications, cloud infrastructure, and supporting technologies.
Perform vulnerability scanning and assessment activities using ACAS.
Review ACAS scan results, identify vulnerabilities and configuration deficiencies, and assist engineering and system administration teams with remediation efforts.
Track vulnerability remediation activities and validate corrective actions through follow-up assessments and scanning.
Assist with implementation and maintenance of security controls within Microsoft Azure environments.
Support development and administration of Azure Policy initiatives, assignments, exemptions, and compliance requirements.
Use Microsoft Defender for Cloud to evaluate security posture, review recommendations, identify configuration issues, and support remediation.
Assist with Xacta administration and automation efforts, including RMF documentation, evidence collection, control implementation, and assessment activities.
Support automated processes for security-control validation and continuous monitoring.
Assist senior engineers with Infrastructure as Code (IaC) and infrastructure automation efforts.
Collect, organize, and maintain technical evidence supporting security-control implementation and assessment.
Work with cloud engineers, system administrators, DevSecOps personnel, ISSOs, and other cybersecurity professionals.
Document technical configurations, security procedures, remediation activities, and engineering solutions.