About the JobWe are seeking a skilled Cybersecurity Engineer to join our Parry Labs team. This role requires solid technical expertise in applying NIST 800-53 security controls to unique systems, networks, and embedded platforms. The successful candidate will support information systems security engineering efforts across the development, implementation, and maintenance of security controls, working closely with senior engineers and program stakeholders to deliver secure, mission-ready systems.
Duties and Responsibilities- Support risk assessments and vulnerability analyses to identify and prioritize security weaknesses across systems, networks, and embedded platforms.
- Implement, tailor, and document NIST 800-53 security controls in support of Risk Management Framework (RMF) authorization packages.
- Perform vulnerability scanning and management using tools such as ACAS (Nessus, SecurityCenter) to identify, track, and remediate system vulnerabilities.
- Apply and validate Security Technical Implementation Guides (STIGs) across operating systems, applications, and network devices; document deviations and compensating controls as needed.
- Assist in developing and maintaining System Security Plans (SSPs), control implementation statements, and Plans of Action and Milestones (POA&Ms).
- Perform security testing and evaluation activities in support of Assessment and Authorization (A&A) efforts.
- Serve as a technical contributor supporting cybersecurity engineering tasks for DoD or prime customer product lines.
- Collaborate with systems, software, and integration engineers to identify and remediate security gaps early in the development lifecycle.
- Write and review security-relevant system specifications and requirements.
- Support the assessment of operating system configurations (Linux, Embedded Linux, VxWorks, Lynx, or Windows) against applicable STIGs and NIST control baselines.
- Assist in securing containerized environments (Docker, Kubernetes, or RedHat OpenShift) across the software development lifecycle.
- Stay current with evolving NIST guidance, security technologies, and industry best practices.
- Other duties as assigned.
Required Qualifications- Bachelor's Degree in Computer Science or a related engineering field.
- 3-5 years of experience in information systems security engineering.
- Working knowledge of NIST SP 800-53, NIST SP 800-37 (RMF), and related NIST guidance (e.g., 800-171, 800-30).
- Familiarity with ISO security standards.
- Experience with vulnerability scanning and management tools, particularly ACAS (Nessus/SecurityCenter), or comparable tools (e.g., Tenable.sc, Nexpose).
- Hands-on experience applying and assessing compliance against DISA Security Technical Implementation Guides (STIGs), including use of SCAP Compliance Checker (SCC) or STIG Viewer.
- Experience assessing the security posture of at least one of the following: Linux, Embedded Linux, VxWorks, Lynx, or Windows operating system configurations and deployments.
- Experience with security technologies such as firewalls, endpoint security, application whitelisting, intrusion detection/prevention systems, and encryption.
- Exposure to securing software containers or orchestration platforms (Docker, Kubernetes, or RedHat OpenShift).
- Hold a DoDM 8140.03 compliant certification such as Security+, CySA+, or equivalent.
- U.S. Citizenship required. Ability to obtain and maintain a DoD Secret Security Clearance (if not already held).
Preferred Qualifications- Master's Degree in Computer Science, Information Systems, or a related field.
- Previous experience as a systems engineer or software engineer in the DoD or Aerospace field.
- Familiarity with Zero-Trust principles.
- Programming or scripting experience in Java, C, C++, or Python.
- Exposure to Anti-Tamper practices for DoD weapon systems.
- Progress toward or possession of DoDM 8140.03 Level 3 baseline certification (CISSP, CASP, etc)
- Experience using eMASS or similar RMF tracking tools.
- Experience automating STIG or vulnerability remediation (e.g., Ansible, scripting).
