Journey Systems Engineer

As a Mid Level Cybersecurity Analyst and ISSO, you will serve as a primary technical resource for enforcing architectural coherence, enterprise security standards, and long-term sustainability across platform-aligned Product Teams. You will embed cybersecurity practices into modern delivery models to prevent vulnerabilities, manage risk, and maintain authorizations. Key responsibilities are:

• RMF & Compliance: Lead the RMF process. Generate, assess, and maintain tailored RMF documentation packages (including SSP, CMP, IRP, CP, POA&Ms, Scorecards, SAR, threat models, and boundary diagrams) using Government tools. Ensure all DoD IS documentation is current and accessible to authorized personnel.
• A&A Lifecycles: Review, update, and publish artifacts supporting unclassified efforts across all DHS SELC phases. Ensure timely A&A submissions to prevent ATO expiration. Provide direct collaboration and support for external inspections, audits, and assessments.
• POA&M Management: Track all system POA&Ms from creation to closure. Coordinate with stakeholders to validate AOR weakness remediations, manage proper channel routing, provide status reports, gather closure artifacts, and identify items requiring waivers or risk acceptance.
• Engineering & Architecture: Interpret system designs to identify data interconnections, interfaces, and protocols to minimize USCG risk. Develop connection approval packages (ISA, MOU, SLA) for USCG LANs (DoDIN, CGOne).
• Change Control: Maintain processes and procedures enabling adherence to organizational Requests for Modification (RFM). Participate in change management boards and conduct Security Impact Assessments (SIA).
• Vulnerability Assessments: Perform testing and control assessments using automated DISA STIG/SRG tools. Conduct Security Readiness Reviews (SRR) and analyze automated scans from DISA SCAP/SCC, ACAS, and Nessus.
• Incident Response & HBSS: Initiate protective/corrective measures upon discovery and establish user reporting pipelines for threats. Coordinate forensic analysis with CGCyber CSOC. Maintain HBSS compliance, review HBSS reports, and monitor/remediate rogue devices.
• Log Auditing & Reviews: Review exception/exclusion requests and provide technical recommendations for Government approval. Audit system logs and intrusion detection data weekly. Request weekly audit triggers to correlate daily records, analyze threat vectors across disparate systems, and report log data integrity gaps to the Government.
• Testing: Coordinate annual Contingency Plan (CP) training/testing before policy expiration, and manage annual Disaster Recovery (DR) Failover testing/documentation.

Systems Engineering, Multiplatform/Cross-Platform, Architectural Services, Sustainability, Enterprise Protection, Analysis Skills, Internet Security, Risk Management, Computer Security, Scorecarding, * High School with 9+ years (or commensurate experience), * DoD 8570 IAT Level II certification (Security+ CE, CySA+, CCNA Security, or equivalent).

• DoD Cybersecurity analysis experience specializing in application security, software assurance, or cloud security within a federal environment.
• Proven experience analyzing and remediating vulnerabilities identified by automated scanning tools within modern software delivery models (CI/CD).
• Comprehensive operational understanding of DISA STIGs, NIST Risk Management Framework (RMF), and federal authorization boundaries.
• Strong experience embedding security requirements into Agile engineering frameworks, product backlogs, and rapid release environments.
• Proficiency tracking, managing, and reporting cyber risks using enterprise tools (such as Jira, Azure DevOps, Tenable Security Center, or ServiceNow).
• Strong foundational understanding of diverse IT domains including enterprise architectures.

Preferred Skills & Experience

• Familiarity with USCG PEO C5I enterprise security strategies, software assurance policies, and continuous Authority to Operate (cATO) pathways.
• Relevant professional cybersecurity certifications highly preferred (e.g., CISSP, CEH, CISM, or DevSecOps security credentials).
• Understanding secure containerization concepts (Kubernetes, Docker) and automated security gating within DevSecOps environments.
• Familiarity with hybrid-cloud architecture (AWS, Azure) and securing web applications against OWASP Top 10 vulnerabilities.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.

At GDH, we believe in the power of people and the importance of caring. Our culture statement, “We care about people,” isn’t just a tagline - it’s the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

Who We Are:

GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women’s services, we pride ourselves on our commitment to quality and service.

GDH Benefits

GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee’s life and aim to enhance their overall experience with the company. Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services. Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans. Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more! For more detailed information on benefits, please go to GDH’s website under the tab for candidates.