cFocus Software is seeking an Information Systems Security Engineer to join our Cross Domain Solution program in Washington, DC. Active Top Secret with SCI Eligibility.
Responsibilities:
- Advise on in-depth security design review and threat/risk assessments.
- Provide inputs to technical artifacts, including Plans of Action and Milestones (POA&Ms), Security Control Traceability Matrices (SCTM), and Risk Assessment Reports (RARs).
- Conduct site visits and assessments to inspect IA plans and security control implementations and support Incident Response Team (IRT) activities.
- Work as part of a team reviewing and assessing Risk Management Framework (RMF) authorization body of evidence for classified information systems, to include: System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Continuous Monitoring Plan, Incident Response Plan, Access Control Plan, Security Assessment Plan, etc.
- Be the technical expert for cyber security in the government program management office.
Requirements:
- DoD 8570 IAT Level II certification or higher (Sec+, CISSP, CASP, etc.)
- 5+ years of experience with Windows and Linux environments.
- 5+ years of experience working with Special Access Programs (SAPs)
- 5+ years of experience with Xacta
- 2+ years of using information security and assurance practices and principles.
- 5+ years of experience with virtualization or cloud environments
- 5+ years of implementing NIST 800-53, Rev 4 and the Risk Management Framework (RMF)
- Active Secret Clearance
Nice to have:
- Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or related field
- Other Security related certification (Cloud, SIEM, forensics, Linux, Windows, etc)
- Experience working in a DevSecOps project environment.
- Formerly or currently a system administrator, developer, or engineer.
- Experience with MS Active Directory, Splunk, ACAS/Nessus, McAfee, Windows, Linux, AWS Security, etc.
- Strong verbal and written communication skills. Able to engage with users in a professional manner and present technical concepts plainly to semi-technical customers. Ability to interface with seasoned Government personnel.
- Ability to work in a matrixed team environment and support multiple different efforts as needed.
- Desire to learn new technologies and tools and willing to share your experience with the team.
