Secret Clearance

TekSynap•North Charleston, SC

3d•Hybrid

About The Position

TekSynap is seeking a Lead Cybersecurity Engineer / Scientist to join our team at Defense Health Agency to provide technical leadership for cybersecurity assessment and authorization activities supporting DHA systems and enclaves. Responsibilities include RMF implementation, IV&V testing, vulnerability assessment, STIG validation, and development of authorization packages for NIWC Atlantic managed cybersecurity efforts.

Requirements

15 years DoD engineering/cybersecurity; managerial experience required
RMF lifecycle implementation experience
STIG validation experience
IV&V cybersecurity testing experience
eMASS experience
Vulnerability assessment experience
Enterprise network security experience
Demonstrated experience supporting government agencies, customers, or contracts within federal environments. This includes the Intelligence Community (IC), Department of Defense (DoD), Federal Civil agencies, and military organizations.
Prior experience supporting the same or similar contract, with an in-depth understanding of the customer environment, requirements, and operational landscape, is highly desirable.
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or related discipline.
Secret clearance (ability to obtain TS preferred)
U.S. Citizen

Nice To Haves

IAM Level III Certification preferred (e.g., CISSP, CISM, CASP, GSLC, CCISO)
ability to obtain TS preferred

Responsibilities

Serve as Lead Technical Engineer for cybersecurity assessment and authorization execution
Lead implementation of RMF controls across systems, enclaves, and sites
Develop and maintain Security Assessment Plans (SAP)
Develop cybersecurity test procedures aligned to NIST and DoD guidance
Conduct security control assessments across technical, operational, and management controls
Perform Independent Verification & Validation (IV&V) testing activities
Conduct vulnerability assessments using ACAS, HBSS, and related tools
Analyze vulnerability scan results and identify remediation actions
Develop Security Assessment Reports documenting findings and recommendations
Perform reassessment of remediated controls and update test results
Provide technical leadership for RMF package development
Support creation of SSP, SAR, POA&M, and supporting artifacts
Conduct system security architecture reviews
Evaluate enclave and system boundary definitions
Perform risk assessments and residual risk analysis
Support development of authorization packages in eMASS
Provide technical validation of RMF artifacts
Support validation readiness review activities
Support IV&V test event planning and execution
Provide technical oversight of STIG implementation
Develop cybersecurity test matrices and validation procedures
Support automated tool development for cybersecurity testing
Analyze ACAS data and generate vulnerability reports
Support automation of STIG assignment and test planning
Provide cybersecurity engineering support for DHA toolsets
Support development of dashboards and reporting metrics
Provide technical guidance to cybersecurity analysts and engineers
Support network, server, and application security testing
Support encryption, authentication, and boundary security reviews
Participate in technical review boards and working groups
Support continuous monitoring and risk scoring activities
Support remediation tracking and POA&M closure validation
Provide technical briefings to Government stakeholders
Support CONUS and OCONUS site cybersecurity assessments
Support cybersecurity documentation and reporting deliverables