Cybersecurity Engineer Mid - Continuous Monitoring

AGE Solutions • Fort Meade, MD

4d • $70,000 • Onsite

About The Position

AGE Solutions is seeking a mid-level Cybersecurity Engineer to support a cybersecurity risk management and assessment program for a DoD customer. The role focuses on continuous monitoring (ConMon) of enterprise and system-level security controls, supporting the Assessment and Authorization (A&A) mission and monitoring the security posture of information systems.

The position is full-time and on-site at one of the listed locations: Ft. Meade, Maryland; Chambersburg, Pennsylvania; or Alexandria, Virginia. The projected salary is $70,000 or more annually, with final compensation based on relevant experience, clearance, certifications, technical skills, contract requirements, and qualifications.

Requirements

• U.S. citizenship.
• Active DoD Top Secret clearance that must be maintained.
• Bachelor’s degree; an IT-related field is preferred, or equivalent professional experience.
• DoD 8570 IA Technical (IAT) or IAM Level II certification.
• Five years of overall experience in cybersecurity, systems engineering, or a similar technical field.
• Proficiency in one or more of the following tools: Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and HBSS.
• Understanding of the RMF process, NIST SP 800-37, NIST SP 800-53, and CNSSI 1253.
• Experience developing, implementing, and conducting a continuous monitoring program for a large organization.
• Proficiency in security architecture, system hardening, vulnerability management, and intrusion detection/prevention.
• Strong written and oral presentation skills.
• Customer service skills.
• Availability to work full-time on-site at one of the listed locations.

Nice To Haves

• An IT-related field of study for the bachelor’s degree.

Responsibilities

• Use Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and ESS to assess, validate, and monitor enterprise and system-level security controls.
• Develop and maintain the Continuous Monitoring (ConMon) Strategy to support the A&A mission.
• Create and update the ConMon SOP, documenting oversight and monitoring requirements for IT systems throughout their lifecycle.
• Conduct continuous security control assessments for information systems under the organization’s purview.
• Perform automated and manual monitoring and generate weekly security control status reports using live security-tool data.
• Ensure ConMon-related controls are properly implemented in RMF packages within eMASS.
• Conduct ongoing assessments in accordance with industry auditor standards to monitor security, vulnerabilities, and threats.
• Report system risk status using the DISA-approved reporting tool.
• Maintain the ConMon Dashboard, tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, and annual validations.
• Track automated and manual security controls and identify overdue assessments and validations.
• Coordinate with system administrators, ACAS administrators, and HBSS administrators to resolve credentialing and data issues.
• Provide real-time information system security status metrics based on the ConMon Strategy and SOP.
• Notify the Government within 60 minutes of security posture changes that negatively affect a system.

Benefits

• 26 days of paid leave, including vacation, sick, personal time, and holidays.
• Performance bonuses based on individual contributions and company-wide results.
• 401(k) with a 3% company match and immediate vesting.
• Company-paid life insurance up to $300,000, with options for additional coverage for employees and dependents.
• Multiple medical plans, dental and vision coverage, and FSA and HSA options.
• 15 days of fully paid parental leave for new parents.
• Military differential pay for employees on active duty.
• Paid training and certifications, tuition reimbursement, and tools and technology for the job.
• Commitment to return 80% of net proceeds to employees in the event of a company sale.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level