Cyber Security Engineer

Job Description: GridIron IT is seeking a Cyber Security Engineer with an Active Top Secret SCI Eligible Clearance. The Cyber Security Engineer will need to be a self-starter with excellent analytical and problem-solving skills, flexibility, good judgment and the ability to coordinate multiple, concurrent tasks in an effective manner. The Cyber Security Engineer works with internal team members to ensure the systems are functional, secure, and scalable. The Engineer will collaborate with internal leadership, customers, and counterparts as the single POC for all items related to security. The systems and networks documentation and services developed will be used to collect and process data and improve the programs security infrastructure. The Cyber Security Engineer will design and develop cyber security technology along with integration of new architectural features into existing infrastructures while maintaining the integrity and security of enterprise-wide cyber systems and networks. The Cyber Security Engineer shall have security Assessment and Authorization (A&A) expertise, to include but not limited to: ICD 503, Federal Information Security Management Act (FISMA), XACTA, and National Institute of Standards and Technology (NIST)., Lead multi-disciplined teams in the design and implementation of the cyber security system architecture. Produce cyber security architectural artifacts. Provide architectural analysis of cyber security features and existing system related to future needs and trends. Reviews and provides input to system requirements based on cyber security posture. Applies industry best practices and lessons learned into future iterations and new designs. Supports the Engineering Review Board by evaluating artifacts for architectural compliance Provides broad based experience in the systems engineering lifecycle and apply the experience to specific cyber security initiatives relating to architectural design and development Resolves architecture implementation issues during integration and testing Advise and assist team members to deploy and configure collection services and tools Work with team members to move data to the appropriate data stores Meet hands-on RMF responsibilities Lead Vulnerability Management and ConMon tasks for multi-disciplined teams Other tasks as assigned

Proactive self-starter demonstrating a positive, willing attitude and excellent oral and written communication skills. Demonstrated ability to adapt to new technologies and learn quickly Organizational Skills: Can plan and prioritize work. Follows tasks to their logical conclusion and makes sure that everything has been done to the right standard. Good attention to detail. Communications: Ability to communicate clearly and efficiently to team members and clients, verbally and in writing. Able to present ideas in a variety of ways depending upon audience and context. Security Assessment and Authorization (A&A) expertise Familiar with Amazon Web Services (S3 Buckets, EC2, Reserved Instances, etc.) Familiar with System Engineering documentation creation (VDDs, diagrams, etc.) Familiar with team collaboration tools (Jira, Confluence, RocketChat) Working knowledge with XACTA 360, Tenable Security Center, Nessus, Trellix ePO, ACAS, HBSS and Audit enterprise security services Proficient in ACAS Vulnerability and STIG scanning, reporting, management and remediation Viewed as an industry expert in the Risk Management Framework (RMF) steps one thru six with the ability to lead Assessment and Authorization (A&A) tasks to successfully achieve Authority to Operate (ATO) Must possess and maintain a TS/SCI Security Clearance DoD.8570/8140 IAM III Certification (CISSP, CISM, CISA, etc.) Minimum Required - COMPTIA Security+ or comparable IAT/IAM II/III certification Requires BS degree and 8-12 years of prior relevant experience OR, Masters with 6-10 years of prior relevant experience; OR 4 years of additional experience in lieu of degree, Familiar with CI/CD Pipeline Management Experience with DevOps tools (GitLab, Fortify, EKS, Kubernetes, Docker, OpenShift) Experience with cloud-based architectures Experience with Engineering Review Boards and Change Management Prior experience with ICD 503 Federal Information Security Management Act (FISMA)

Salary Range: $115,000.00 - $160,000.00 (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.) Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs. Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status. Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients’ missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT’s experienced workforce and our commitment to ensuring we meet and exceed our clients’ expectations.