Cyber Security Engineer

Job SummaryA Rampant Technologies Cybersecurity Engineer (CSE) is a key resource that is a part of the Rampant teamreporting to the Principal Engineer overseeing the CSE team to deliver innovative Cyber Security solutions that arein alignment with the company’s goals.Essential Duties & ResponsibilitiesSME on problem identification, diagnosis, and resolution of problemsDevelop best practices for processes and standards that will better the systemPerform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and configuration updates asrequired to comply with security requirements.Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones.Perform hardening of ops systems, COTS and open-source productValidate best practices in Penetration testing, Configuration analysis, and SecurityPrepare comprehensive security assessment testing documentation to validate applied security controls insupport of Assessment and Authorization (A&A) testing. Generating/maintaining security accreditation artifactsassociated with RMF process to include, but not limited to Security Requirements Traceability Matrix, SecurityPlans, Certification Test Plans, Continuous Monitoring Plans)2Perform timely updates in accreditation DBProvide technical guidance focused on information security architecture.Key Skills, Education & ExperienceMinimum of eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts ofsimilar scope, type, and complexity is required; ideally three (3+) years of direct experience in the samelevel/grade for like role.Techno functional knowledge of/experience in:Execution of the Assessment & Authorization (A&A process) in accordance with governmentrequirements (e.g. ICD-503)Information systems security and continuous monitoring practices and how to assess theireffectiveness per NIST SP 800-53 and NIST SP 800-53A.DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, and security controlsassessment criteria/proceduresIntegrity, availability, authentication, and non-repudiation conceptsIT security principles and methods (e.g., firewalls, demilitarized zones, encryption)Network access, identity, and access management (e.g., public key infrastructure [PKI])Security system design tools, methods, and techniquesRelevant laws, policies, procedures, or governance as they relate to work that may impact criticalinfrastructure.TCP/IP networking technologies, Linux account administration, Linux folder permissions, PatchManagement best practices on Operating Systems and applications, known vulnerabilities associatedwith Windows and Linux platforms.Continuous monitoring processes as outlined in NIST SP 800-137 appropriate for systems, leveragingexisting tools, efforts, and incorporating new automation techniques.Virtualization technologies (e.g. VMWare, Docker)OSI model and how specific devices and protocols interoperate, including knowledge of protocols, andservices for common network trafficDoD/IC system security control requirementsXACTA and SNOWSecurity testing and penetration tools that include Assured Compliance Assessment Solution (ACAS),Wireshark, Retina, Tripwire, etc…Hands on experience and proficiency with the full Microsoft Office Suite and tools such as MicrosoftProject, Microsoft VisioSelf-starter/motivator and Certifications and ClearanceMust have certifications (certifications with * indicate willing to hire if certification is within 3-6 months offinalizing):Active TS/SCI w/ Poly clearance requiredCurrent certification compliant with DoD 8570 IAM or IAT level 3OR obtain certification within 6 months ofhire and maintain certification throughout employment.MUST meet DoD 8570 IAT Level III requirementsIAT Level II Certifications (Security+ or equivalent) Job SummaryA Rampant Technologies Cybersecurity Engineer (CSE) is a key resource that is a part of the Rampant teamreporting to the Principal Engineer overseeing the CSE team to deliver innovative Cyber Security solutions that arein alignment with the company’s goals.Essential Duties & ResponsibilitiesSME on problem identification, diagnosis, and resolution of problemsDevelop best practices for processes and standards that will better the systemPerform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and configuration updates asrequired to comply with security requirements.Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones.Perform hardening of ops systems, COTS and open-source productValidate best practices in Penetration testing, Configuration analysis, and SecurityPrepare comprehensive security assessment testing documentation to validate applied security controls insupport of Assessment and Authorization (A&A) testing. Generating/maintaining security accreditation artifactsassociated with RMF process to include, but not limited to Security Requirements Traceability Matrix, SecurityPlans, Certification Test Plans, Continuous Monitoring Plans)2Perform timely updates in accreditation DBProvide technical guidance focused on information security architecture.Key Skills, Education & ExperienceMinimum of eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts ofsimilar scope, type, and complexity is required; ideally three (3+) years of direct experience in the samelevel/grade for like role.Techno functional knowledge of/experience in:Execution of the Assessment & Authorization (A&A process) in accordance with governmentrequirements (e.g. ICD-503)Information systems security and continuous monitoring practices and how to assess theireffectiveness per NIST SP 800-53 and NIST SP 800-53A.DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, and security controlsassessment criteria/proceduresIntegrity, availability, authentication, and non-repudiation conceptsIT security principles and methods (e.g., firewalls, demilitarized zones, encryption)Network access, identity, and access management (e.g., public key infrastructure [PKI])Security system design tools, methods, and techniquesRelevant laws, policies, procedures, or governance as they relate to work that may impact criticalinfrastructure.TCP/IP networking technologies, Linux account administration, Linux folder permissions, PatchManagement best practices on Operating Systems and applications, known vulnerabilities associatedwith Windows and Linux platforms.Continuous monitoring processes as outlined in NIST SP 800-137 appropriate for systems, leveragingexisting tools, efforts, and incorporating new automation techniques.Virtualization technologies (e.g. VMWare, Docker)OSI model and how specific devices and protocols interoperate, including knowledge of protocols, andservices for common network trafficDoD/IC system security control requirementsXACTA and SNOWSecurity testing and penetration tools that include Assured Compliance Assessment Solution (ACAS),Wireshark, Retina, Tripwire, etc…Hands on experience and proficiency with the full Microsoft Office Suite and tools such as MicrosoftProject, Microsoft VisioSelf-starter/motivator and Certifications and ClearanceMust have certifications (certifications with * indicate willing to hire if certification is within 3-6 months offinalizing):Active TS/SCI w/ Poly clearance requiredCurrent certification compliant with DoD 8570 IAM or IAT level 3OR obtain certification within 6 months ofhire and maintain certification throughout employment.MUST meet DoD 8570 IAT Level III requirementsIAT Level II Certifications (Security+ or equivalent) Job SummaryA Rampant Technologies Cybersecurity Engineer (CSE) is a key resource that is a part of the Rampant teamreporting to the Principal Engineer overseeing the CSE team to deliver innovative Cyber Security solutions that arein alignment with the company’s goals.Essential Duties & ResponsibilitiesSME on problem identification, diagnosis, and resolution of problemsDevelop best practices for processes and standards that will better the systemPerform vulnerability assessments using standardized tools (Nessus, DISA STIGs) and configuration updates asrequired to comply with security requirements.Track and fulfill liens associated with A&A activities as documented in the Plan of Actions and Milestones.Perform hardening of ops systems, COTS and open-source productValidate best practices in Penetration testing, Configuration analysis, and SecurityPrepare comprehensive security assessment testing documentation to validate applied security controls insupport of Assessment and Authorization (A&A) testing. Generating/maintaining security accreditation artifactsassociated with RMF process to include, but not limited to Security Requirements Traceability Matrix, SecurityPlans, Certification Test Plans, Continuous Monitoring Plans)2Perform timely updates in accreditation DBProvide technical guidance focused on information security architecture.Key Skills, Education & ExperienceMinimum of eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts ofsimilar scope, type, and complexity is required; ideally three (3+) years of direct experience in the samelevel/grade for like role.Techno functional knowledge of/experience in:Execution of the Assessment & Authorization (A&A process) in accordance with governmentrequirements (e.g. ICD-503)Information systems security and continuous monitoring practices and how to assess theireffectiveness per NIST SP 800-53 and NIST SP 800-53A.DCID 6/3, ICD 503, CNSSI 1253, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-37, and security controlsassessment criteria/proceduresIntegrity, availability, authentication, and non-repudiation conceptsIT security principles and methods (e.g., firewalls, demilitarized zones, encryption)Network access, identity, and access management (e.g., public key infrastructure [PKI])Security system design tools, methods, and techniquesRelevant laws, policies, procedures, or governance as they relate to work that may impact criticalinfrastructure.TCP/IP networking technologies, Linux account administration, Linux folder permissions, PatchManagement best practices on Operating Systems and applications, known vulnerabilities associatedwith Windows and Linux platforms.Continuous monitoring processes as outlined in NIST SP 800-137 appropriate for systems, leveragingexisting tools, efforts, and incorporating new automation techniques.Virtualization technologies (e.g. VMWare, Docker)OSI model and how specific devices and protocols interoperate, including knowledge of protocols, andservices for common network trafficDoD/IC system security control requirementsXACTA and SNOWSecurity testing and penetration tools that include Assured Compliance Assessment Solution (ACAS),Wireshark, Retina, Tripwire, etc…Hands on experience and proficiency with the full Microsoft Office Suite and tools such as MicrosoftProject, Microsoft VisioSelf-starter/motivator and Certifications and ClearanceMust have certifications (certifications with * indicate willing to hire if certification is within 3-6 months offinalizing):Active TS/SCI w/ Poly clearance requiredCurrent certification compliant with DoD 8570 IAM or IAT level 3OR obtain certification within 6 months ofhire and maintain certification throughout employment.MUST meet DoD 8570 IAT Level III requirementsIAT Level II Certifications (Security+ or equivalent)

Minimum of eight (3) years’ relevant experience as a Cybersecurity Engineer in programs and contracts of

similar scope, type, and complexity is required; ideally three (3+) years of direct experience in the same

level/grade for like role.

Techno functional knowledge of/experience in:

Execution of the Assessment & Authorization (A&A process) in accordance with government

requirements (e.g. ICD-503)

Information systems security and continuous monitoring practices and how to assess their, TCP/IP networking technologies, Linux account administration, Linux folder permissions, Patch

Management best practices on Operating Systems and applications, known vulnerabilities associated

with Windows and Linux platforms.

Continuous monitoring processes as outlined in NIST SP 800-137 appropriate for systems, leveraging

existing tools, efforts, and incorporating new automation techniques.

Virtualization technologies (e.g. VMWare, Docker)

OSI model and how specific devices and protocols interoperate, including knowledge of protocols, and

services for common network traffic

DoD/IC system security control requirements

XACTA and SNOW

Security testing and penetration tools that include Assured Compliance Assessment Solution (ACAS),

Wireshark, Retina, Tripwire, etc…

Hands on experience and proficiency with the full Microsoft Office Suite and tools such as Microsoft

Project, Microsoft Visio

Self-starter/motivator and

Certifications and Clearance

Must have certifications (certifications with * indicate willing to hire if certification is within 3-6 months of

finalizing):

Active TS/SCI w/ Poly clearance required

Current certification compliant with DoD 8570 IAM or IAT level 3OR obtain certification within 6 months of

hire and maintain certification throughout employment.

MUST meet DoD 8570 IAT Level III requirements

IAT Level II Certifications (Security+ or equivalent)