Cybersecurity Engineer

The Cybersecurity Engineer - Continuous Monitoring to join our team in support of a cybersecurity risk management and assessment program with our DoD customer. Utilize Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and ESS to assess, validate, and monitor enterprise and system-level security controls. Develop and maintain the ConMon Strategy to support the A&A mission. Create and update the ConMon SOP, detailing oversight and monitoring requirements for IT systems throughout their lifecycle. Conduct continuous security control assessments for all ISs under the organizations purview. Perform automated and manual monitoring, generating weekly security control status reports using live data from security tools. Ensure ConMon-related controls are properly implemented in RMF packages within eMASS. Conduct ongoing assessments in compliance with industry auditor standards to monitor security, vulnerabilities, and threats. Report system risk status using the DISA-approved reporting tool. Maintain the ConMon Dashboard, tracking compliance, POA&M status, CMRS visibility, asset management, FISMA reviews, and annual validations. Track automated and manual security controls, identifying overdue assessments and validations. Coordinate with system administrators, ACAS administrators, and HBSS administrators to resolve credentialing and data issues. Provide real-time IS security status metrics based on the ConMon Strategy and SOP. Notify the Government within 60 minutes of security posture changes that negatively impact a system.

Cybersecurity Engineer Mid - Continuous Monitoring Top Secret DoD 8570 IA Technical (IAT) or IAM Level II certification. Five (5) years overall in cybersecurity, systems engineering, or a similar technical field. Proficiency in one or more of the following tools: Qmulos, Splunk, ACAS, Axonius, CheckMark, BURP, and HBSS Understanding of the RMF process, NIST SP 800- 37, NIST SP 800-53, CNSSI 1253 Experience in developing, implementing, and conducting a continuous monitoring program for a large organization. Proficiency in security architecture, system hardening, vulnerability management, and intrusion detection/prevention Strong written and oral presentation skills Customer service skills. Bachelor’s degree (IT-related field preferred), or equivalent professional experience.