Senior System Security Engineer

Parsons•Boulder, CO

3d•Onsite

About The Position

Parsons is seeking a talented Senior Cyber Security Engineer to join our growing team! While this position is primarily on-site, there will be opportunities to work remote when planning and documenting.

Requirements

Active Secret Clearance
Bachelor’s degree in Software, Computer, Systems, Electrical, Information Technology Engineering, or a related technical field. Additional years of experience can count in lieu of a degree.
8+ years of related experience
CompTIA Sec+
Experience with RMF-based cybersecurity assessments
Experience supporting IATT, ATO, or ATC approval efforts
Strong understanding of DoD and NIST cybersecurity frameworks and controls

Nice To Haves

Cybersecurity certifications such as CompTIA CASP+, CISSP, OSCP, CISM, CEH, GSEC
System administration experience with Linux
Network switch and router administration experience or network engineering experience
Experience with VMware
Experience with Kubernetes and Docker

Responsibilities

Serve as the technical SME for RMF-based cybersecurity assessments and system authorization strategies.
Develop and update RMF artifacts, including some or all of the following: System Security Plans (SSPs) Security Control Traceability Matrices (SCTMs) Configuration Management Plans Incident Response Plans Continuous Monitoring (CONMON) Plans POA&Ms and Security Assessment Reports (SARs)
Support the IATT, ATC, and ATO processes, supporting internal engineering teams and external Authorizing Officials (AOs).
Perform system-level security control assessments (NIST SP 800-53) and validation of security posture.
Evaluate external connection risks and support the ATC approval process with boundary defense configurations and enclave protections.
Support vulnerability and compliance scans using tools such as ACAS, Tenable Security Center, STIG Viewer, and Evaluate STIG.
Work with development and infrastructure teams to define, validate, and maintain secure configurations and baselines.
Maintain and update continuous monitoring (CONMON) processes, collect metrics, track findings, and coordinate with ISSMs and stakeholders.
Draft and maintain cyber documentation required for accreditation package submission.
Assist in security impact analyses for changes in configuration, new software deployments, or system modifications