Cybersecurity Engineer

Chugach Government Solutions•San Diego, CA

22h

About The Position

The Cybersecurity Engineer ensures programs adhere to relevant Department of Defense cybersecurity policy and industry best practices to protect sensitive data. As part of the Risk Management Framework, the role supports planning, performs testing, assesses existing documentation and implementation, and recommends policy improvements to the customer. The position also supports security requirements and controls across program environments, including security evaluations, vulnerability scanning, Authority to Operate (ATO) efforts, and the preparation and maintenance of security plans and corrective-action documentation. It works with clients and cross-functional teams to document requirements, test systems, improve testing methods, and produce technical documentation and reports. The role is primarily performed in an office setting using standard office equipment and may require travel.

Requirements

Associate degree in computer science or a related field; relevant work experience may substitute for a degree.
Three years of experience in cybersecurity.
DoD 8570-01M IAT Level II baseline certification, such as CompTIA Security+ CE, GSEC, SSCP, or similar.
Experience using Field-Programmable Gate Arrays (FPGA) and J-Link to program processors.
Proven experience with shell scripting and automation.
Excellent written and oral communication skills.
Good interpersonal skills and ability to work closely in group environments.
Ability to work in a fast-paced environment with minimal supervision.
Must have and maintain a DoD Secret Clearance; U.S. citizenship is required.
Ability to pass any employment background check and/or drug testing required by the contract.

Nice To Haves

Ability to troubleshoot software issues and work with coding languages such as C++, C#, HTML, and CSS.
Experience with security evaluations, risk assessments, and control assessments.
Experience performing vulnerability scanning using DISA ACAS.
Working knowledge of embedded systems.
Working knowledge of AC/DC electronics.
Completion certificate in a relevant domain, such as Linux+, RHEL, C++, or similar certifications.
Understanding of the DoD environment and Navy shipboard systems, and familiarity with government agency reviews and audits.

Responsibilities

Manage time effectively and ensure project and task timelines are met.
Communicate effectively with clients and facilitate weekly or bi-weekly meetings as required.
Read and modify flowcharts, layouts, diagrams, charts, code comments, and clear code representing software system information.
Identify technology limitations and deficiencies in systems, processes, procedures, and methods.
Document and submit configuration items and required lifecycle deliverables consistently in accordance with policy requirements.
Draft test plans to assess and validate project or task completion against client expectations and industry standards.
Test software systems for functionality, compatibility, and performance.
Document and update functional requirements, develop process flows, maintain directives and policies, and develop SOPs supporting the training enterprise.
Prepare and edit white papers and technical proposal documentation, including recommendations for future projects.
Create test reports that summarize findings, identify potential issues, and recommend improvements to system functionality.
Collaborate with cross-functional teams to integrate and validate project deliverables.
Help define and improve testing methodologies, frameworks, and best practices.
Ensure information-security policies, standards, procedures, and automated mechanisms are documented, implemented, and followed.
Assess information-security activities and controls, identify security gaps, and recommend mitigations through business processes, technical controls, or policy improvements.
Help program teams and stakeholders capture and refine information-protection requirements, incorporate them into system designs, meet government requirements, and obtain an ATO.
Recommend additional security requirements and safeguards.
Support organizational security evaluations, systems analyses, security architecture reviews, and related planning and engagement efforts.
Support formal testing required by government accrediting authorities to validate security requirements.
Update, build, and configure modular security applications for UCES environments.
Perform vulnerability scanning and provide technical support for DISA ACAS to help protect network confidentiality, integrity, and availability.
Prepare System Security Plans, update Plans of Action and Milestones, review system audits, and monitor corrective actions through closure.
Develop security and privacy policies with IT governance and other policy development groups.
Perform duties cost-effectively and complete work accurately and on time.
Work professionally and courteously with coworkers and clients in multicultural environments.
Follow company safety policies and industrial and office safety practices.
Comply with company and contractual SOPs and personnel policies and procedures.