Cybersecurity Engineer

This role maintains cybersecurity monitoring operations, performs triage to assess incident scope and impact, identifies vulnerabilities, and recommends mitigation strategies. Operating with deep expertise in the Risk Management Framework (RMF), the position exercises technical autonomy to manage eMASS workflows, maintain DISA circuit connections, and author core accreditation artifacts to secure operational Authorization to Operate (ATO)., * Develop comprehensive A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), and Security Assessment Reports (SARs).

• Test and apply security controls based on security categorization, applying relevant overlays (privacy, classified, intel) and security control tailoring.
• Conduct active and passive reconnaissance of data; author and maintain Plans of Action and Milestones (POA&Ms) with accurate mitigation statements and control mapping.
• Execute scheduled eMASS accreditation tasks, including Quarterly IV&Vs, quarterly STIG checks, Annual Security Reviews (ASRs), monthly POA&M updates, and ATO/ATC/IATC/IATT resubmissions.
• Maintain DISA circuit connections (CCSDs), manage inheritance from accredited systems and cloud service providers, and oversee workflow schedules for all accreditations.
• Maintain cybersecurity monitoring operations, assess incident scope/impact, and recommend actionable remediation strategies.

• 10+ years of progressive cybersecurity, incident response, or A&A accreditation experience. Clearance: Active Secret security clearance.
• Active DoD IAM Level II certification required (one of the following: CAP, CASP+ CE, CISM, CISSP [or Associate], or GSLC)., * Certified Information Systems Security Professional (CISSP).
• Hands-on capability to triage security incidents, perform vulnerability assessments, and implement remediation strategies.
• Expertise in security control testing, STIG compliance checks, IV&V auditing, and eMASS workflow administration.
• Strong analytical capabilities with IT security software, web security tools, data analytics, and risk management framework applications.

TECHEAD’s mission is to make our associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won’t strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.