Cybersecurity Engineer (System Steward - Remote Opportunity)

Mind Computing

11d•$100,000 - $110,000•Remote

About The Position

Mind Computing is seeking a full-time, 100% remote Cybersecurity Engineer (System Steward) to support a Department of Veterans Affairs (VA) project by identifying, mitigating cybersecurity risks and maintaining a strong information system security posture. The ideal candidate will provide expertise in Authority to Operate (ATO), the NIST Risk Management Framework (RMF), security controls, cloud security, and governance, risk, and compliance (GRC). The Cybersecurity Engineer will support RMF activities across the full ATO lifecycle, develop and maintain security documentation and artifacts, assess system risks and vulnerabilities, and coordinate with system administrators, developers, system owners, ISSOs, and other stakeholders to address security requirements and authorization gaps. The candidate must reside within the continental US.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, or a related field.
5+ years of information security experience, including at least 3 years of cybersecurity and cloud security experience supporting a large government agency.
Strong experience supporting NIST RMF, ATO, security authorization, and continuous monitoring activities.
Experience developing RMF security artifacts, implementing security controls, and managing POA&Ms.
Knowledge of NIST SP 800-53, security compliance, GRC, and federal cybersecurity policies and practices.
Experience conducting security assessments, risk analyses, gap assessments, impact assessments, and vulnerability assessments.
Experience with cloud security and FedRAMP, including IaaS, PaaS, SaaS, and shared security responsibilities.
Experience with security assessment and vulnerability tools such as Tenable Nessus, Nmap, SCAP, and Wireshark.
Experience with ServiceNow Continuous Authorization and Monitoring (CAM) or similar security/GRC platforms.
Knowledge of network security, software development, systems engineering, cloud architecture, and infrastructure security.
Strong documentation, analytical, presentation, communication, and stakeholder coordination skills.
Ability to translate technical cybersecurity requirements into actionable recommendations.
Ability to obtain government clearance.
Experience with the VA or other Government agencies.
Required: ISC2 CISSP certification.
Required: One or more of the following certification categories: IAT II, IAM II, or IASAE II.
Additional relevant certifications may include: ISC2 CAP, SSCP, CCSP, or ISSEP, ISACA CISM or CISA, EC-Council CEH, CompTIA Security+, Network+, SecurityX, or Linux+

Responsibilities

Provide cybersecurity consulting and technical support to VA stakeholders for ATO, security authorization, and NIST RMF activities.
Support RMF Steps 1–7, including security categorization, control implementation, assessment, authorization, and continuous monitoring.
Lead and coordinate security and privacy activities within project teams, including development and maintenance of required RMF security artifacts.
Develop and maintain security documentation, including Incident Response, Contingency Planning, Disaster Recovery, POA&M, and other authorization documentation.
Analyze authorization packages and security artifacts to identify gaps, establish remediation plans, and coordinate resolution with system stakeholders.
Conduct security risk assessments, impact analyses, gap assessments, compensating control evaluations, and residual risk assessments.
Assess IT products, operating systems, and security configurations for compliance with NIST SP 800-53 and applicable security policies.
Develop and implement security controls and support remediation of identified vulnerabilities and compliance findings.
Support security configuration and compliance activities for infrastructure, operating system images, and IT product deployments.
Prepare and present security reports, briefings, risk assessments, and recommendations to technical and non-technical stakeholders.
Collaborate with system administrators, developers, system owners, ISSOs, and internal/external customers to assess the security impact of hardware, software, and configuration changes.
Take on additional tasks and responsibilities as needed to support team objectives and ensure the success of the project.