Insurance Assurance Engineer

- Bachelors degree in Cybersecurity, Information Security, IT, Electrical Engineering, Network Engineering, Computer Science, or a related field with 4 years of relevant experience, or a Masters degree with 2 years of relevant experience. - Must be a U.S. Citizen and possess a DoD Secret Clearance. - Active security certification that complies with DOD 8570 IAT Level III or higher. - Comprehensive understanding of the Risk Management Framework (RMF) steps, particularly from Steps 4 to 7. - Capability to identify security technical implementation guidelines (STIGs) relevant to system authorization boundaries. - Proficient in deconstructing security controls and ensured compliance of artifacts or test results. - Familiarity with techniques used for system exploitation (e.g., MITRE ATT&CK framework) to assess risks and potential mitigations. - Ability to utilize appropriate technical mitigating resources. - Experience with eMASS functionalities including control inheritance and POAM imports. - Familiarity with cybersecurity authorization activities according to current manuals, instructions, and guidelines. - Skills to monitor patch compliance using tools such as ACAS and Microsoft Defender for Endpoints. - Experience in developing and executing security procedures and reviewing Security Technical Implementation Guide (STIG) checklists. - Capacity to create, edit, and maintain security documentation, Standard Operating Procedures (SOP), and Plans of Action and Milestones (POA&M). - Experience with site audits, including System Readiness Reviews (SRR). - Knowledge of cybersecurity assessment and authorization processes compliant with DoDI 8500.01 and applicable NIST standards. - Attention to detail and ability to manage multiple tasks in a fast-paced environment. - Strong analytical, communication, and troubleshooting skills for effective collaboration with teams. - Background in cybersecurity assessments, vulnerability scanning, or security operations with a focus on compliance. - Experience in leading cybersecurity initiatives and coordinating with clients and stakeholders. - Effective written and verbal communication skills to articulate complex subjects clearly to diverse teams.