Info Security sys Engineering

Cynet Systems • Salt Lake, UT

2d

About The Position

This role focuses on Information Security Systems Engineering, involving the execution and support of Risk Management Framework (RMF) lifecycle activities. The position requires a strong understanding of cybersecurity principles, networking concepts, and experience with embedded or communications systems. The engineer will collaborate with cross-functional teams, interface with stakeholders and assessors, and contribute to ensuring system security and compliance within DoD environments. The role also involves documentation analysis, creation, and lab work with IT and specialized embedded systems.

Requirements

• Bachelor's Degree in cybersecurity, computer science, information systems, or related field with a minimum of 6+ years of prior relevant experience. OR Graduate Degree and a minimum of 4+ years of prior related experience. OR In lieu of a degree, a minimum of 10+ years of prior related experience.
• DoD Secret Clearance.
• Understanding of networking concepts (TCP/IP, network architecture, boundary defense).
• Experience working with embedded systems or communications systems.
• Familiarity with Agile or DevSecOps environments.
• Experience working in cross-functional engineering teams.
• Ability to travel up to 10% as needed.
• One DoD 8140 / 8570-compliant certification (e.g., Security+, CISSP, SSCP, GSEC), or ability to obtain within 6 months of hire.

Nice To Haves

• Exposure to cryptographic systems, FIPS 140-3, or NSA certification processes.
• Experience with high-assurance or classified systems.
• Hands-on experience executing RMF within DoD environments.
• Familiarity with tools such as eMASS or XACTA.
• Experience applying NIST SP 800-53 security controls and STIGs.
• Experience supporting Authority to Operate (ATO) processes.
• Strong verbal and written communication skills.
• Familiarity with TEMPEST, Anti-Tamper, or related system security disciplines.
• Experience supporting government customers in a SETA/A&AS role.
• Additional certifications (CISM, CISA, CEH, GIAC, etc.).
• Active TS/SCI clearance or ability to obtain.

Responsibilities

• Execute and support RMF lifecycle activities (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Develop, maintain, and review RMF documentation (e.g., SSPs, SARs, POA&Ms, Security Plans).
• Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance.
• Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines.
• Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented.
• Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts.
• Track and report compliance status, risks, and remediation activities to program leadership.
• Contribute to continuous monitoring strategies and ongoing system compliance.
• Perform documentation analysis creation and Lab work with IT systems and specialized embedded systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level