Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field.
5+ years of experience in cybersecurity engineering or information assurance.
Active DoDI 8140 qualification necessary.
Experience developing RMF authorization artifacts and managing POA&Ms in eMASS or similar workflows.
Practical knowledge of NIST SP 800-53 controls and DoD STIGs.
Experience in cloud security operations, particularly in AWS.
Responsibilities
Serve as the primary custodian of the system security authorization package in eMASS.
Prepare and maintain RMF artifacts like the System Security Plan and Security Assessment Report.
Lead validation of evidence for NIST SP 800-53 transition activities.
Monitor and update Plans of Action and Milestones in eMASS.
Collaborate with System Owners and Engineers to define remediation timelines and resource needs.
Review non-compliance closures before submission for approval.
Conduct impact assessments for cyber tasks affecting AWS system architecture.
Integrate security activities into Agile workflows for GitLab CI/CD.
Oversee continuous monitoring and manage vulnerability scanning activities.
Maintain cybersecurity dashboards and track vulnerability trends.
Benefits
Health and welfare benefits including medical, dental, and vision coverage.
Life insurance and voluntary plans available.
Participation in a 401(k) plan.
Full Job Description
Job Title: Cyber Security Engineer
Responsibilities
Serve as the primary custodian of the system security authorization package within the Enterprise Mission Assurance Support Service (eMASS).
Prepare, author, and maintain RMF artifacts, including the System Security Plan (SSP), Security Assessment Report (SAR), Continuous Monitoring Strategy, and supporting security control evidence.
Lead the curation and validation of evidence supporting NIST SP 800-53 Rev. 4 to Rev. 5 transition activities and control implementation.
Author, monitor, track, and update Plans of Action and Milestones (POA&Ms) in eMASS and internal ticketing workflows.
Partner with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource requirements.
Review non-compliance closures and remediation evidence before formal submission for ISSM and Authorizing Official (AO) approval.
Conduct technical and operational impact assessments for directed cyber tasks affecting the cARMY AWS system architecture, workloads, and cloud boundaries.
Conduct and review DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using STIG Viewer and automated compliance tooling.
Support GitLab CI/CD delivery by integrating vulnerability analysis, secure configuration validation, and other DevSecOps security activities into Agile workflows.
Oversee continuous monitoring activities using applicable tools; manage vulnerability scanning through ACAS and related tooling.
Maintain cybersecurity dashboards, track POA&Ms aging and vulnerability trends, and monitor operational security tickets, incident responses, and change approvals.
Requirements
Active Secret security clearance.
Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field.
5+ years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations.
Active DoDI 8140 qualification.
Demonstrated experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow.
Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements to system development or sustainment.
Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment.
Experience collaborating with technical and program stakeholders to resolve security findings and meet suspense deadlines.
Preferred Qualifications:
Experience supporting Army or DoD programs
Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD.
Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines.
Familiarity with Agile frameworks such as SAFe and with incremental delivery
System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
