As a
Sr. Cybersecurity Engineer I, you will support a government program by applying NIST SP 800-53 controls, monitoring security posture, analyzing vulnerabilities, and coordinating remediation across AWS, applications, APIs, and infrastructure. The role also includes junior Business Analyst and Project Manager responsibilities, such as defining security requirements, facilitating stakeholder discussions, tracking action items, and reporting progress.
What you'll do:- Communicate regularly with DHS customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate).
- Perform monthly continuous monitoring reporting to include analysis of scans, logs, accounts, etc.
- Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments.
- Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
- Use vulnerability scanning tools and frameworks to evaluate the security posture of a system.
- Assist the customer in preparing training and table top exercises for contingency planning, incident response and disaster recovery.
- Complete ISSO USCIS provided training as required.
What you'll need to succeed:- Minimum of five years of IT experience as a Security Lead or Information Security Analyst, including evaluation, implementation, or management of security practices for new and existing technologies.
- Bachelor's degree in Computer Science or a comparable field, or equivalent experience.
- Strong understanding of NIST SP 800-53 controls and their application within the RMF.
- Strong understanding of API-based security mechanisms and the OWASP framework for web application vulnerabilities. Hands-on implementation is not required.
- Experience with AWS architecture and a technical understanding of cloud technologies used in customer environments, including microservices, containers, zero trust concepts, data streaming, or data pipelines.
- Experience conducting continuous monitoring, preparing monthly status reports, and analyzing and reporting cybersecurity vulnerability scan results.
- Experience assessing the risk of deficiencies identified during RMF control testing and tracking corrective actions.
- Experience with requirements analysis, security architecture and design, and documentation of cybersecurity or information security solutions.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Ability to gather requirements, coordinate stakeholders, facilitate meetings, and track security work through completion.
- Ability to obtain and maintain DHS suitability
- An ISSO-relevant professional certification.
SALARY RANGE: $100,000.00 - $125,000.00
The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including:
- The candidate's professional background and relevant work experience
- The specific responsibilities of the role and organizational needs
- Internal equity and alignment with current team compensation
- This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:
- Performance-based bonuses
- Company-paid training and/or certifications
- Referral bonuses
Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration.
Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance.
Benefits: All full-time employees are eligible to participate in our benefits programs:
- Health, dental, and vision insurance
- 401(k) retirement plan with company match
- Paid time off (PTO) and holidays
- Parental Leave and dependent care
- Flexible work arrangements
- Professional development opportunities
- Employee assistance and wellness programs
Like we said,
we are big fans of our people. That's why
we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades.
Not ready to apply now? Sign up to join our newsletter here.
