Senior Cybersecurity Engineer / ISSO

Agil3 Technology Solutions (A3T)•Quantico Base, VA

1d•$125,000 - $160,000•Onsite

About The Position

Agil3 Technology Solutions (A3T) is seeking an experienced Senior Cybersecurity Engineer / Information Systems Security Officer (ISSO) to provide cybersecurity engineering, information assurance, vulnerability management, incident response, and security compliance support for the U.S. Government. The position will work closely with Government cybersecurity leadership and A3T's Systems, Network, Cloud, and Technical Support teams to maintain the confidentiality, integrity, availability, and security posture of the customer’s systems and services.

Requirements

Must have 7–10+ years of progressively responsible cybersecurity, information assurance, or information systems security experience.
Must have an active DoD Secret security clearance.
Must satisfy applicable DoD 8140/DCWF requirements for Work Role 521 or 722 at the Advanced proficiency level.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related discipline.
Experience performing ISSO, cybersecurity engineering, or comparable enterprise cybersecurity functions.
Strong knowledge of DoD cybersecurity policies and security-control implementation.
Experience implementing and assessing DISA STIGs.
Experience with vulnerability identification, tracking, remediation, and reporting.
Experience supporting cybersecurity incident response and investigation.
Experience securing Windows, network, virtualization, and/or cloud environments.
Working knowledge of Microsoft Defender or comparable enterprise security technologies.
Experience with access control, account security, authentication, and least-privilege principles.
Experience developing cybersecurity documentation, SOPs, security procedures, and technical reports.
Experience working with Systems, Network, and Cloud Engineers to remediate security findings.
Strong analytical, troubleshooting, documentation, and communication skills.
Ability to operate effectively in a geographically dispersed DoD enterprise environment.

Nice To Haves

CISSP, SecurityX/CASP+, CySA+, Security+, or other certification appropriate to the assigned DCWF work role.
Experience with ACAS/Tenable, Microsoft Defender, SIEM/log-analysis tools, endpoint-security platforms, and vulnerability-management technologies.
Experience with Microsoft Azure and Microsoft 365 security.
Experience with NIST SP 800-53, RMF, eMASS, POA&Ms, and continuous monitoring.
Experience with Zero Trust architecture and implementation.
Previous USMC, Navy, DISA, or other DoD cybersecurity experience.

Responsibilities

Perform ISSO/ISSM cybersecurity support functions for assigned systems and networks.
Implement and maintain cybersecurity policies, procedures, plans, technical documentation, and security artifacts.
Support implementation and sustainment of DoD and USMC cybersecurity requirements across enterprise IT systems.
Conduct cybersecurity engineering reviews and provide security recommendations for systems, applications, network infrastructure, and cloud services.
Implement, assess, and monitor DISA Security Technical Implementation Guides (STIGs) and applicable security configuration requirements.
Identify, document, track, and coordinate remediation of system and network vulnerabilities.
Monitor applicable vulnerability notifications and coordinate implementation of required security updates and corrective actions.
Support cybersecurity incident identification, reporting, response, investigation, and forensic activities.
Support and implement Zero Trust cybersecurity principles and requirements.
Operate, monitor, and support approved cybersecurity technologies, including Microsoft Defender and other Government-approved security tools.
Review system logs, security alerts, vulnerability findings, and other security information to identify potential cybersecurity threats or deficiencies.
Coordinate vulnerability remediation activities with Systems Administrators, Network Engineers, Cloud Engineers, and other technical personnel.
Support configuration and change-management activities to ensure proposed changes maintain the approved cybersecurity posture.
Review technical changes for cybersecurity impact and recommend appropriate security controls and mitigation measures.
Support System Authorization Access Request (SAAR) processes and other user-access security requirements.
Support Trusted Agent functions associated with approved token issuance and user-access processes, as authorized.
Maintain cybersecurity architecture, configuration, procedures, SOPs, and other required security documentation.
Track cybersecurity findings, remediation activities, exceptions, and corrective actions through closure.
Support security testing and validation following system upgrades, configuration changes, patches, and technology refreshes.
Support upgrades and maintenance of cybersecurity tools and technologies.
Develop After Action Reports and lessons learned following significant cybersecurity incidents or events.
Provide cybersecurity guidance and technical assistance to the IT support workforce.
Coordinate cybersecurity issues with Government cybersecurity personnel and other appropriate DoD/USMC organizations.