Sr. Systems Security; Cybersecurity Engineer; Onsite - Cedar Rapids, IA Secret Clearance Required

Senior Systems Security (Cybersecurity) Engineer

Location:

US-IA-CEDAR RAPIDS-130 ~ 5350 C Ave NE ~ BLDG 130

Work location:

Cedar Rapids, IA (onsite). Relocation assistance available. Requires an active and transferable Secret clearance with ability to obtain Top Secret clearance after start.

Security Clearance:
DoD Clearance:
Secret;
Active and existing security clearance required on day 1.

• Support the development, implementation, and maintenance of RMF artifacts and security control validation activities to obtain and maintain an Authority to Operate (ATO).
• Review proposed system changes and evaluate their cybersecurity impact to ensure modifications do not adversely affect system security or accreditation.
• Perform vulnerability assessments, analyze findings, develop mitigation strategies, and document remediation plans.
• Implement and validate security improvements by assessing system configurations, identifying vulnerabilities, and applying security best practices.
• Develop cybersecurity requirements, system security architecture documentation, boundary diagrams, data flow diagrams, hardware/software inventories, and supporting RMF documentation.
• Perform STIG implementation, compliance validation, and remediation using tools such as Evaluate STIG, STIG Viewer, and SCAP Compliance Checker.
• Conduct vulnerability scanning using Tenable Security Center (Tenable.sc) and Nessus, analyze results, and coordinate remediation efforts.
• Provide hands‑on Linux systems administration and cybersecurity support for Red Hat Enterprise Linux (RHEL) and other Linux distributions.
• Troubleshoot Linux OS issues including network connectivity (DNS, routing, firewalls, interfaces, VLANs, bonding, SSH), system services (systemd), user authentication (LDAP, SSSD, PAM), SELinux policy issues, storage, file systems, permissions, process management, log analysis using journalctl, rsyslog, auditd, and security logs.
• Perform cybersecurity troubleshooting on Linux systems by validating secure configurations, reviewing running services and open ports, analyzing firewall configurations, verifying certificates and encryption configurations, investigating authentication failures and audit events, supporting incident response and forensic data collection.
• Troubleshoot network communication using OSI model and standard Linux networking tools (ping, trace route, tcpdump, netstat/ss, nmcli, ip, dig, nslookup, curl, wget).
• Collaborate with software engineers, systems engineers, ISSOs, and program managers to integrate cybersecurity requirements into system designs.
• Develop technical mitigation statements, risk acceptance packages, and executive‑level documentation supporting RMF assessments.
• Maintain accurate technical documentation, procedures, and cybersecurity artifacts throughout the program lifecycle.

• Become a more effective Systems Security Engineer and leader by gaining niche skills that make you unique.
• Develop subject matter expertise and leadership in cybersecurity within VLF technologies with exposure to evolving products.

• Typically requires a degree in STEM and minimum 5 years prior relevant experience, or an advanced degree with minimum 3 years of experience.
• Active and transferable Secret U.S. government‑issued security clearance (with ability to obtain Top Secret clearance).
• U.S. citizenship required for security clearances.
• Experience in STIG and RMF.
• Experience with systems engineering requirements/specifications.
• Experience implementing DoD and Federal IA certification and accreditation processes, IA controls, and developing and maintaining associated documentation.
• Experience with vulnerability scanning tools (e.g., Tenable Security Center, STIG Viewer, SCAP Compliance Checker).
• Experience with Linux commands.

• Active and transferable U.S. government‑issued DoD TOP SECRET clearance.
• DoDI 8570.01‑M IAT Level‑II compliant certification (Security+, CISSP, or equivalent).
• Experience with Program Protection Plans (PPP), DoDI 5000.02 and DoDI 5200.39.
• Experience implementing highly technical solutions and reporting their importance to program managers and…