Cybersecurity Engineer

Cybersecurity Engineer
Albuquerque, NM

• Serve as the embedded ISSO, maintaining the system’s ongoing Authorization to Operate (ATO) without lapse through platform migration and cloud transition.
• Validate and maintain security baseline in the agency’s GRC tool, resolving discrepancies between documented and implemented controls in coordination with the Government ISSO.
• Deliver a formal Security Gap Analysis within 60 days and annually thereafter, conducted against the NIST SP 800-53 Rev. 5 Moderate Baseline using SP 800-53 methodology.
• Develop and update the Plan of Action and Milestones (POA&Ms), each with defined timelines, responsible parties, potential cost estimates, and verification criteria; integrate into the Agile sprint backlog for prioritization alongside functional work.
• Conduct and manage continuous vulnerability scanning, triage findings against the NIST SP 800-53B Moderate baseline, and track remediation within directed patch timelines.
• Validate security controls in target environments before any production cutover. Confirm ATO status before migration cutovers.
• Review and accept quarterly cybersecurity packages and the annual Security Gap Analysis as joint acceptance with Government stakeholders.
• Support Security Assessments and Authorization activities, coordinate OEM to Government POA&M resolution, and maintain the Information Security Continuous Monitoring strategy per NIST 800-37 Rev.
  2.
• Apply engineering level controls at external integration boundaries including encrypted transfer, authenticated API calls, validated data formats, and anomaly detection.
• Other duties as assigned.

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a combination of education and experience.
• 8+ Years Federal Cybersecurity Experience with direct NIST RMF experience on FIPS Moderate or higher impact systems
• Experience with a federal GRC tool, primarily Xacta, eMass, or equivalent.
• Demonstrated experience in serving as or supporting an ISSO role that includes ATO maintenance, POA&M management, and continuous monitoring of a federal system.
• Background check.
• Must be able to obtain a Public Trust.
• Must be a U.S. citizen.

• CISSP and CISM certified.
• Experience with FedRAMP authorized cloud environments and cloud security control inheritance.
• Successfully pass background and drug screening.

• Knowledge supporting an ATO through platform migration or a major system upgrade.
• Familiarity with DOI OCIO IT Baseline Compliance Contract Guidelines.
• Familiarity with static application security testing tools.
• Understanding of NIST SP 800-160 System Security Engineering principles.
• Familiar with Software Development Life Cycles and administering security controls along the delivery roadmap.
• Knowledge or previous experience using MS Azure Dev Ops.
• Strong organizational skills with demonstrated ability to handle multiple projects and details simultaneously.
• Excellent communication skills (written, verbal, presentations).
• Excellent analytical, planning, and scheduling skills.
• Ability to resolve highly complex problems.
• Self-starter who can work with a large and diverse team of business, management, and IT individuals.
• Ability to obtain an IA driver’s license, which will allow operation of a government vehicle.