Cybersecurity Engineer

Albuquerque, NM

Cyberstar is seeking a Cybersecurity Engineer to serve as the embedded Information System Security Officer (ISSO) for a federal IT contract supporting FIPS 199 Moderate-impact system handling CUI and PII across multiple federal bureaus. Specific tasks will be focused on immediate and high-priority requirements necessary to maintain the current Authorization to Operate (ATO), in accordance with the NIST Risk Management Framework and NIST Special Publication 800-53 (as revised, but currently at revision 5) at the Federal Information Processing Standard (FIPS) 199 Moderate Level.

• Serve as the embedded ISSO, maintaining the system’s ongoing Authorization to Operate (ATO) without lapse through platform migration and cloud transition.
• Validate and maintain security baseline in the agency’s GRC tool, resolving discrepancies between documented and implemented controls in coordination with the Government ISSO
• Deliver a formal Security Gap Analysis within 60 days and annually thereafter, conducted against the NIST SP 800-53 Rev. 5 Moderate Baseline using SP 800-53 methodology.
• Develop and update the Plan of Action and Milestones (POA&Ms), each with defined timelines, responsible parties, potential cost estimates, and verification criteria. Able to integrate into the Agile sprint backlog for prioritization alongside functional work.
• Conduct and manage continuous vulnerability scanning, triage findings against the NIST SP 800-53B Moderate baseline, and track remediation within directed patch timelines.
• Validate security controls in target environments before any production cutover. Confirm ATO status before migration cutovers.
• Review and accept quarterly cybersecurity packages and the annual Security Gap Analysis as joint acceptance with the Government stakeholders.
• Support Security Assessments and Authorization activities, coordinate OEM to Government POA&M resolution, and maintain the Information Security Continuous Monitoring strategy per NIST 800-37 Rev.2.
• Apply engineering level controls at external integration boundaries including encrypted transfer, authenticated API calls, validated data formats, and anomaly detection.
• Other duties as assigned.

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a combination of education and experience.
• 8+ Years Federal Cybersecurity Experience with direct NIST RMF experience on FIPS Moderate or higher impact systems
  • Experience with a federal GRC tool, primarily Xacta, eMass, or equivalent.
  • Demonstrated experience in service as or supporting an ISSO role that includes ATO maintenance, POA&M management, and continuous monitoring of a federal system.
• Background check.
• Must be able to obtain a Public Trust
• Must be a US citizen

Preferred Qualifications:

• CISSP and CISM certified
• Experience with FedRAMP authorized cloud environments and cloud security control inheritance
• Successfully pass background and drug screening

Knowledge, Skills, and Abilities:

• Knowledge supporting an ATO through platform migration or a major system upgrade
• Familiarity with DOI OCIO IT Baseline Compliance Contract Guidelines
• Familiarity with static application security testing tools
• Understanding of NIST SP 800-160 Systems security engineering principles
• Familiar with Software Development Lifecycles and administering security controls along the delivery roadmap.
• Knowledge or previous experience using MS Azure DevOps
• Strong organizational skills with demonstrated ability to handle multiple projects and details simultaneously.  
• Excellent communication skills (written, verbal, presentations).  
• Excellent organization, analytical, planning, and scheduling skills.  
• Ability to resolve highly complex problems. 
• Self-starter who can work with a large and diverse team of business, management, and IT individuals. 
• Ability to obtain an IA driver’s license, which will allow operation of a government vehicle.

#Cyberstar, LLC