Cyber Engineer - Annapolis Junction, MD

Cyber Engineer 4

Seeking a Cyber Engineer 4 that is able to work with a dynamic team of system engineers and administrators responsible for design, implementation, operations & maintenance, and cybersecurity for large complex resilient hardware and virtualized infrastructure. This position will perform Cybersecurity / Information Assurance for all customer‑managed systems, applications, and hardware.

• Design, implement, and maintain Department of Defense provided Security and Vulnerability tools including Host Based Security System (HBSS), Splunk, and Microsoft Defender for Endpoints.
• Support authorization/reauthorization efforts in alignment with the Department of Defense Risk Management Framework (RMF), NIST 800-53 (e.g., develop and apply Active Directory Group Policy Objects, deployment packages).
• Analyze new security requirements, define courses of action, and design enterprise solutions, coordinating with engineering and operations teams to implement within the environment.
• Formalize and execute a process for communicating vulnerability results in a manner understood by technical and non‑technical stakeholders based on risk tolerance and impact to the environment.
• Leverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor‑supplied fixes and workarounds.
• Design, implement, and maintain scripts used in asset discovery and vulnerability status.
• Conduct continuous independent discovery and vulnerability scans/security assessments of enterprise‑wide assets and proactive control testing.
• Set up and execute Nessus scans; establish automated reporting.
• Document, prioritize, and formally report asset and vulnerability state, along with remediation recommendations and validation.
• Coordinate with system owners and system administrators/technical points of contact to identify system vulnerabilities, conduct vulnerability analysis, and formulate remediation strategies.
• Develop packages for complex remediation efforts and coordinate with vulnerability remediation specialists for deployment.
• Support and monitor patch management compliance across the infrastructure to align to audit requirements.
• Identify and apply DISA Security Technical Implementation Guide (STIG) benchmarks.
• Conduct manual STIG reviews.
• Support preparation of Plan of Action & Milestones (POAM) development to support compliance and authorization/reauthorization activities.
• Prepare and disseminate regular Cyber Compliance/vulnerability reporting; interact with the customer to explain results and address issues.
• Contribute to the development of Standard Operating Procedures, Work Instructions, User Guides, and checklists.
• Work as a team to consistently learn and share advanced skills and foster team excellence.
• Actively collaborate with the ISSO to develop, maintain, and enhance cyber security controls.
• Collaborate with security groups such as red teams, threat intelligence and risk management to form a holistic team dedicated to thwarting attackers and reducing attack surface.

• Clearance/Citizen Type: Applicants selected will be subject to a government security investigation and may meet eligibility requirements, including U.S. Citizenship, for access to classified information;
  ACTIVE TS/SCI w/ Poly clearance REQUIRED.
• Education: 5+ Years of Experience with a Master's Degree in Information Technology, Risk Management, Cybersecurity; 7+ Years of Experience with a Bachelor's Degree in Information Technology, Risk Management, Cybersecurity.
• Required Progressive
  
  Experience:
  
  Working with industry and government agencies on the design of platforms and integrated systems;
  Implementing cybersecurity requirements in a variety of industrial control systems (building management, electronic security, fire alarm/mass notification, electrical distribution, power management, etc.);
  Proficiency with ACAS and HBSS and mitigation strategies;
  Developing policies and procedures to ensure information systems reliability and accessibility and to prevent and defend against unauthorized access;
  Assessment, mitigation, and closure of network vulnerabilities and vulnerability management…