GovCIO
From GovCIO's careers page
Status: listed on the employer's own careers page when we last checked (daily). Confirm on their site before applying.
GovCIO is currently hiring a Cybersecurity Engineer to perform tasks related to RMF, STIG implementation, ACAS, and other cybersecurity activities. This position will be in San Antonio, TX and will be an onsite only position at Lackland AFB.
Designs and implements information assurance and security engineering systems with requirements of continuity, operations security, cryptography, forensics, regulatory compliance, physical security analysis (including facilities analysis, and security management). Assesses and mitigates system security threats and risks throughout the program life cycle. Validates system security requirements definition and analysis. Establishes system security designs. Implements security designs in hardware, software, data, and procedures. Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities. Supports secure systems operations and maintenance.
Participates with the client in the strategic design process to translate security and requirements into technical designs.
Configures and validates secure systems and tests security products and systems to detect security weakness; performs network scanning and vulnerability analysis.
Ensures that the appropriate security features and safeguards have been implemented on all information systems as required by DoD/IC policy and directives, and industry best practices.
Performs defense device system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of all implemented, maintained, and deployed systems.
Provides security certification test and evaluation of assets, vulnerability management and response, security assessments, customer support and provides guidance on security issues.
The Cyber Security Analyst will provide technical expertise in the area of Compliance Reporting and Risk Management Framework (RMF)
Understanding of the system development lifecycle. Ability to provide guidance to government representatives.
Expert understanding of Preliminary Design Review (PDR) and Critical Design Review (CDR) processes in the context of security engineering
Manage Assured Compliance Assessment Solution (ACAS) in a development environment. Maintain policies and initiate scans.
Collaborate with system engineers to mitigate vulnerabilities
Maintain Plan of Action and Milestones (POA&M)
Compile information and provide support for continuous monitoring, security control assessments, Authorization to Connect (ATC) and Authorization to Operate (ATO)
Coordinate with stakeholders to obtain, update, organize, maintain, and track required RMF documentation
Review Security Impact Analysis
High School with 6 - 9 years (or commensurate experience)
Required Skills and Experience
Clearance Required: TS/SCI
Strong understanding of RMF workflow tools like Xacta and eMASS
Experience with the Air Force Security Impact Analysis Process
Strong working knowledge of programs working within Air Force network rules and guides
Expert understanding of STIGs, STIG Checklists, STIG Implementation, and POA&M for non-compliance
Experience with network management tools, network engineering principles, network analysis
Complete understanding of Assessment & Authorization process
Possess an expert understanding of current computer security requirements and compliance
Expert ability to maintain System Security and Risk Mitigation plans
Excellent written/verbal communications skills
DoDM 8140 IAT Level II (CCNA-Security, CySA+, CND, Security + CE)
DoDM 8140 (CISSP, CISA, COMPTIA Security X, CCNP)
Experience with Tenable, Tanium, Splunk, Trellix, ServiceNow, LogRhythm
Posted Salary Range
USD $110,000.00 - USD $120,000.00 /Yr.
Designs and implements information assurance and security engineering systems with requirements of continuity, operations security, cryptography, forensics, regulatory compliance, physical security analysis (including facilities analysis, and security management). Assesses and mitigates system security threats and risks throughout the program life cycle. Validates system security requirements definition and analysis. Establishes system security designs. Implements security designs in hardware, software, data, and procedures. Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities. Supports secure systems operations and maintenance.
Participates with the client in the strategic design process to translate security and requirements into technical designs.
Configures and validates secure systems and tests security products and systems to detect security weakness; performs network scanning and vulnerability analysis.
Ensures that the appropriate security features and safeguards have been implemented on all information systems as required by DoD/IC policy and directives, and industry best practices.
Performs defense device system installation, configuration maintenance, account maintenance, signature maintenance, patch management, and troubleshooting of all implemented, maintained, and deployed systems.
Provides security certification test and evaluation of assets, vulnerability management and response, security assessments, customer support and provides guidance on security issues.
The Cyber Security Analyst will provide technical expertise in the area of Compliance Reporting and Risk Management Framework (RMF)
Understanding of the system development lifecycle. Ability to provide guidance to government representatives.
Expert understanding of Preliminary Design Review (PDR) and Critical Design Review (CDR) processes in the context of security engineering
Manage Assured Compliance Assessment Solution (ACAS) in a development environment. Maintain policies and initiate scans.
Collaborate with system engineers to mitigate vulnerabilities
Maintain Plan of Action and Milestones (POA&M)
Compile information and provide support for continuous monitoring, security control assessments, Authorization to Connect (ATC) and Authorization to Operate (ATO)
Coordinate with stakeholders to obtain, update, organize, maintain, and track required RMF documentation
Review Security Impact Analysis
High School with 6 - 9 years (or commensurate experience)
Required Skills and Experience
Clearance Required: TS/SCI
Strong understanding of RMF workflow tools like Xacta and eMASS
Experience with the Air Force Security Impact Analysis Process
Strong working knowledge of programs working within Air Force network rules and guides
Expert understanding of STIGs, STIG Checklists, STIG Implementation, and POA&M for non-compliance
Experience with network management tools, network engineering principles, network analysis
Complete understanding of Assessment & Authorization process
Possess an expert understanding of current computer security requirements and compliance
Expert ability to maintain System Security and Risk Mitigation plans
Excellent written/verbal communications skills
DoDM 8140 IAT Level II (CCNA-Security, CySA+, CND, Security + CE)
DoDM 8140 (CISSP, CISA, COMPTIA Security X, CCNP)
Experience with Tenable, Tanium, Splunk, Trellix, ServiceNow, LogRhythm
Scores your resume against this job the way resume scanners do: the job's hard and soft skills, searchability, recruiter tips and formatting.
Create a free account to see your score. Your resume stays in this browser until then, and we never store it.
Already a member? Sign in