FSO/Industrial Security Cyber Engineer, Junior

CGI Group Inc.•Arlington, TX

70d•$100,000 - $200,000•Hybrid

About The Position

CGI Federal has an exciting opportunity for a FSO/Industrial Security Cyber Engineer within our Intel sector advancing the national security mission through cutting edge technology. You must have a passion for keeping pace with rapidly evolving technology advancements and leveraging your knowledge on a highly collaborative team to deliver state-of-the-art capabilities. The FSO/Industrial Security Cyber Engineer is a hybrid security professional who combines the responsibilities of a Facility Security Officer (FSO) with a focus on cybersecurity engineering. This role is common in defense contracting and other organizations that handle classified government information. CGI Federal is growing its high-performance team whose members share a passion for building high-quality, scalable, advanced IT solutions in a collaborative, fast-paced, outcome-driven mission. This position is located in USA VA Arlington, however, a hybrid working model is acceptable.

Requirements

Bachelor's degree and/or 0 to 2 years of experience
Security Clearance: TS/SCI required with the ability to obtain a TS/SCI with Poly highly desired

Responsibilities

Industrial security management: This individual is responsible for maintaining the organization's industrial security program and Facility Clearance (FCL) in compliance with regulations like the National Industrial Security Program Operating Manual (NISPOM), now implemented under 32 CFR Part 117.
Cybersecurity engineering and compliance: They are responsible for implementing cybersecurity measures and ensuring compliance with frameworks such as the Risk Management Framework (RMF), Cybersecurity Maturity Model Certification (CMMC), and other security directives.
Security program oversight: The engineer will develop, implement, and manage security plans and procedures for both physical and digital assets, including Standard Operating Procedures (SOPs) and insider threat programs.
Government liaison: They act as the primary point of contact with government agencies like the Defense Counterintelligence and Security Agency (DCSA) and manage external security audits.
Security clearance management: This involves initiating security clearance applications for employees, tracking their status, and conducting initial and exit briefings.
System accreditation and monitoring: They prepare system security authorization documents (like System Security Plans and Plans of Action and Milestones) and perform ongoing security monitoring of classified systems.
Incident response: The engineer investigates and reports security incidents and data spills, recommending corrective actions and contributing to incident response and disaster recovery planning.
Training and awareness: They develop and conduct security awareness and education programs for cleared personnel,
Technical security controls: Implement, manage, and monitor security measures such as firewalls, intrusion detection/prevention systems, and access controls.
Vulnerability management: Conduct vulnerability scanning and penetration testing on networks and systems, and report on compliance using tools like Nessus, SCAP, and Splunk.
Secure system development: Apply security techniques and best practices to system and software development to embed security from the start (DevSecOps).
Digital forensics: Gather and analyze digital evidence for investigations following security incidents.