Information Assurance Engineer (Cybersecurity)

- Bachelors degree and 8-12 years of prior relevant experience or Masters with 6-10 years of prior relevant experience in Cybersecurity, Information Security, IT, EE, Network Engineering, Computer Science, or related field. - US Citizen with DoD Secret Clearance. - Active security certification meeting DOD 8570 IAT level III or higher. - Thorough understanding of the RMF steps, particularly Steps 4 to 7. - Ability to identify applicable STIGs after reviewing a system authorization boundary and its components. - Skill in decomposing a security control/security check and ensuring artifact and test results satisfy the control/AP/check. - Familiarity with techniques for system exploitation (MITRE ATTACK) to assess risk and mitigation strategies. - Knowledge of technical mitigations and resources for identifying appropriate mitigating factors. - Experience with eMASS including control inheritance, TR Import, and POAM functionalities. - Capability to support cybersecurity authorization activities in compliance with current Cybersecurity and IA manuals, instructions, and guides. - Ability to verify patch compliance using approved solutions such as ACAS, IAVA compliance dashboards, and Microsoft Defender for Endpoints. - Experience in executing security procedures, validating information system security requirements, and coordinating STIG checklist execution, review, and disposition. - Proven ability to independently develop and maintain system security documentation, including guiding SOPs, TTP, POA&Ms, and FISMA Score Cards. - Familiarity with developing and applying business processes ensuring the correct security level. - Ability to document Ports, Protocols, and Services (PPS), ensuring accurate data flows and compliance with DODI 8551.1. - Practical experience with various cybersecurity tools and DoD networks. - Experience with FISMA and related compliance reporting. - Attention to detail. - Capability to manage multiple tasks and self-assign work in a dynamic environment. - Strong analytical, communication, and troubleshooting skills for effective collaboration with virtual teams and clear status reporting. - Experience in cybersecurity assessment, vulnerability scanning, integration and testing, data analytics, or security operations. - History of leading cybersecurity tasks and collaborating with stakeholders and team members. - Knowledge of cybersecurity assessment processes per DoDI 8500.01, DoDI 8551.01, and NIST guidelines. - Experience in supporting formal Cybersecurity/IA testing and preparing System Security Plans. - Strong verbal and written communication skills for business writing on complex topics and interaction with diverse stakeholders. - Understanding of conducting security monitoring, reporting, and maintaining compliance with regulations and policies. - Expertise in Security Engineering, Architecture, Vulnerability Assessment, Incident Management, Security Operations, and Policy Development. - Self-motivated with leadership capabilities to work effectively in a matrix organization.