Principal Cybersecurity Engineer

The Principal Cybersecurity Engineer will create, and tailor Security Control Traceability Matrices (SCTM) based on the Risk Management Framework (RMF) guidance, NIST 800-53, ICD 503, and CNSSI 1253. Exposure to Cross Domain Solution (CDS) accreditation and the National Cross Domain Strategy and Management Office (NCDSMO) Raise the Bar (RTB) initiative is required. Experience creating artifacts supporting the RMF accreditation process is required. Essential Duties and Responsibilities: Serves as the primary technical liaison for Accreditation activities, leading and conducting Accreditation-related briefings for government ISSMs and senior customer stakeholders. Prepare support briefings for ATO packages statuses Facilitate XACTA and eMass data entry at Owl customer sites by creating Authorization to Operate packages for Authorization Official approval to include: CONOPS SSTP SSP POA&M Self-Assessment Plan Cyber Threat Security Plan SCTM Facilitate the ATO process on-site with Owl customers Interface with Cross Domain engineers to document security control responses within required documentation

Bachelor’s Degree in System Engineering, Electrical Engineering, Computer Science, or a computer/software engineering related field. Experience Minimum of 15+ years of experience in RMF Security Engineering Knowledge, Skills & Abilities Ability to understand, interpret and make recommendations based on relevant publications (e.g., NIST 800-53, ICD-503 and DoD 8510.01) Requirement Definition and Analysis, System Security Architecture NCDSMO standards and guidance documents regarding CDS architecture, design, development, engineering, implementation, system security, local and remote management and monitoring, and filtering. Leadership experience in utilizing Risk Management Framework to drive the end-to-end accreditation process including negotiating with the Authorizing Official (AO) to achieve an Authorization to Operate (ATO) Linux Operating Systems including open-source distributions, SELinux policy and embedded systems Security Technical Implementation Guide development and modification, and STIG remediation SCAP/OVAL and ACAS scanning and thorough understanding of the framework Previous Common Criteria Trusted Computing Penetration testing Test and Evaluation (T&E) and Independent Verification and Validation (IV&V) Additional Competencies/Requirements Candidates must hold current TS/SCI clearance. Required Certifications: DoD 8570 IAT/IAM Level III certification Familiarity with XACTA/TSABI process for the IC and the SABI process for DOD. Candidates must be able to commute regularly (M-F) to customer sites in the local area. Ability to travel outside of the local area, up to 30% annually, is required.

The salary for this position ranges between $165,000.00 and $185,000.00 USD. This range represents Owl Cyber Defense Solutions’ good-faith estimate of the base salary for this position at the time of posting. Placement within the range will depend on factors such as relevant work experience, geographic location, education, training, certifications, key skills, internal equity, market data, and other job-related considerations. Compensation will not be below any applicable local minimum wage. This position is also eligible to participate in the Company’s annual bonus program, subject to the terms and conditions of the applicable plan., Owl offers a comprehensive and competitive benefits package designed to support the health, financial security, and wellbeing of our employees and their families. Our benefits include medical, dental, and vision coverage, a 401(k) retirement plan with company match, generous paid time off, company-paid life insurance, and company-paid short- and long-term disability insurance. Employees may also choose from a variety of voluntary benefits and wellness programs. Specific benefit plan details, employee contribution rates, eligibility requirements, and other program information will be shared during the hiring process.

Owl Cyber Defense is a leader and trusted partner in cyber security. We deliver solutions that protect and connect the world’s most critical networks. Owl’s product lines of cross domain, data diode, and portable media solutions provide the strongest available security checkpoints for threat prevention and secure data availability. Our in-depth expertise in security engineering at the operating system level enables us to help government and commercial customers meet ever-evolving cyber security threats., Owl Cyber Defense Solutions, LLC is a fast-growing cybersecurity solutions company, holding a firm leadership position in network security and secure information transfer. It is a privately-owned US company with offices in Columbia, MD, Danbury, CT and Morrisville, NC. For more information, see https://www.owlcyberdefense.com.