Cybersecurity Engineer

Chenega Corporation • Albuquerque, NM

1d • Onsite

About The Position

Cyberstar is seeking a Cybersecurity Engineer to serve as the embedded Information System Security Officer (ISSO) for a federal IT contract supporting FIPS 199 Moderate-impact system handling CUI and PII across multiple federal bureaus. Specific tasks will be focused on immediate and high-priority requirements necessary to maintain the current Authorization to Operate (ATO), in accordance with the NIST Risk Management Framework and NIST Special Publication 800-53 (as revised, but currently at revision 5) at the Federal Information Processing Standard (FIPS) 199 Moderate Level.
At Cyberstar, we aim to analyze and boost human and business performance through the implementation of business process redesign and information technology (IT) modernization to include data analytics and cloud computing. We offer an alternate solution to improving the quality and effectiveness of business operations. In an ever-changing economy, Cyberstar helps companies better read and understand their market data through the synchronization of process innovation, human dynamics, analysis, and the integration of data technology capabilities, to ensure functional optimization in their business.

Requirements

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a combination of education and experience.
• 8+ Years Federal Cybersecurity Experience with direct NIST RMF experience on FIPS Moderate or higher impact systems
• Experience with a federal GRC tool, primarily Xacta, eMass, or equivalent.
• Demonstrated experience in service as or supporting an ISSO role that includes ATO maintenance, POA&M management, and continuous monitoring of a federal system.
• Background check.
• Must be able to obtain a Public Trust
• Must be a US citizen

Nice To Haves

• CISSP and CISM certified
• Experience with FedRAMP authorized cloud environments and cloud security control inheritance
• Successfully pass background and drug screening
• Knowledge supporting an ATO through platform migration or a major system upgrade
• Familiarity with DOI OCIO IT Baseline Compliance Contract Guidelines
• Familiarity with static application security testing tools
• Understanding of NIST SP 800-160 Systems security engineering principles
• Familiar with Software Development Lifecycles and administering security controls along the delivery roadmap.
• Knowledge or previous experience using MS Azure DevOps
• Strong organizational skills with demonstrated ability to handle multiple projects and details simultaneously.
• Excellent communication skills (written, verbal, presentations).
• Excellent organization, analytical, planning, and scheduling skills.
• Ability to resolve highly complex problems.
• Self-starter who can work with a large and diverse team of business, management, and IT individuals.
• Ability to obtain an IA driver’s license, which will allow operation of a government vehicle.

Responsibilities

• Serve as the embedded ISSO, maintaining the system’s ongoing Authorization to Operate (ATO) without lapse through platform migration and cloud transition.
• Validate and maintain security baseline in the agency’s GRC tool, resolving discrepancies between documented and implemented controls in coordination with the Government ISSO
• Deliver a formal Security Gap Analysis within 60 days and annually thereafter, conducted against the NIST SP 800-53 Rev. 5 Moderate Baseline using SP 800-53 methodology.
• Develop and update the Plan of Action and Milestones (POA&Ms), each with defined timelines, responsible parties, potential cost estimates, and verification criteria. Able to integrate into the Agile sprint backlog for prioritization alongside functional work.
• Conduct and manage continuous vulnerability scanning, triage findings against the NIST SP 800-53B Moderate baseline, and track remediation within directed patch timelines.
• Validate security controls in target environments before any production cutover. Confirm ATO status before migration cutovers.
• Review and accept quarterly cybersecurity packages and the annual Security Gap Analysis as joint acceptance with the Government stakeholders.
• Support Security Assessments and Authorization activities, coordinate OEM to Government POA&M resolution, and maintain the Information Security Continuous Monitoring strategy per NIST 800-37 Rev.2.
• Apply engineering level controls at external integration boundaries including encrypted transfer, authenticated API calls, validated data formats, and anomaly detection.
• Other duties as assigned.

Benefits

• professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day.
• opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world.
• on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.
• broad range of benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level