CyberSecurity Engineer

Govcio LLC • JBSA Lackland AFB, TX

4d • Onsite

About The Position

GovCIO is hiring a Cybersecurity Engineer to perform cybersecurity activities related to Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), Assured Compliance Assessment Solution (ACAS), and other security functions. This onsite-only position is based at Lackland AFB in San Antonio, Texas.

The role designs, implements, assesses, and maintains information assurance and security engineering systems throughout the program life cycle. It supports secure system operations and maintenance, security certification and accreditation activities, vulnerability management, compliance reporting, and coordination with government representatives and other stakeholders. The engineer also provides technical expertise for RMF documentation, continuous monitoring, security control assessments, and authorization processes.

Requirements

• High school education and 6–9 years of experience, or commensurate experience.
• Active TS/SCI clearance required.
• Strong understanding of RMF workflow tools such as Xacta and eMASS.
• Experience with the Air Force Security Impact Analysis Process.
• Strong working knowledge of programs operating within Air Force network rules and guides.
• Expert understanding of STIGs, STIG checklists, STIG implementation, and POA&Ms for non-compliance.
• Experience with network management tools, network engineering principles, and network analysis.
• Complete understanding of the Assessment and Authorization process.
• Expert understanding of current computer security requirements and compliance.
• Expert ability to maintain System Security and Risk Mitigation plans.
• Excellent written and verbal communication skills.
• DoDM 8140 IAT Level II certification, such as CCNA-Security, CySA+, CND, or Security+ CE.

Nice To Haves

• DoDM 8140 certification such as CISSP, CISA, CompTIA Security X, or CCNP.
• Experience with Tenable, Tanium, Splunk, Trellix, ServiceNow, or LogRhythm.

Responsibilities

• Design and implement information assurance and security engineering systems addressing continuity, operations security, cryptography, forensics, regulatory compliance, physical security analysis, and security management.
• Assess and mitigate system security threats and risks throughout the program life cycle.
• Validate system security requirements and analysis, establish security designs, and implement those designs in hardware, software, data, and procedures.
• Verify security requirements and perform system certification and accreditation planning, testing, and liaison activities.
• Support secure systems operations and maintenance.
• Participate with the client in strategic design processes, translating security requirements into technical designs.
• Configure and validate secure systems; test security products and systems for weaknesses; perform network scanning and vulnerability analysis.
• Ensure required security features and safeguards are implemented on information systems in accordance with DoD/IC policies, directives, and industry best practices.
• Install, configure, and maintain defense device systems; perform account and signature maintenance, patch management, and troubleshooting.
• Provide security certification test and evaluation of assets, vulnerability management and response, security assessments, customer support, and guidance on security issues.
• Provide technical expertise in compliance reporting and the Risk Management Framework (RMF).
• Provide guidance to government representatives and apply understanding of the system development life cycle.
• Apply security engineering expertise to Preliminary Design Review (PDR) and Critical Design Review (CDR) processes.
• Implement security controls and execute STIGs and compliance standards.
• Manage ACAS in a development environment, maintain policies, and initiate scans.
• Collaborate with system engineers to mitigate vulnerabilities.
• Maintain the Plan of Action and Milestones (POA&M).
• Compile information and support continuous monitoring, security control assessments, Authorization to Connect (ATC), and Authorization to Operate (ATO).
• Coordinate with stakeholders to obtain, update, organize, maintain, and track required RMF documentation.
• Review Security Impact Analysis.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED