Sr. Systems Security; Cybersecurity Engineer; Onsite - Cedar Rapids, IA Secret Clearance Required

Senior Systems Security Engineer (Cybersecurity) – Onsite

Location:

Cedar Rapids, IA, United States

U.S. citizenship required. Active and transferable Secret clearance required on day one’s start, with potential upgrade to Top Secret.

Do you like puzzles? Obtaining and maintaining an authority to operate (ATO) can feel like a puzzle, requiring collaboration across multiple disciplines to protect our nation’s warfighter technology advantage.

• Support the development, implementation, and maintenance of Risk Management Framework (RMF) artifacts and security control validation activities required to obtain and maintain an Authority to Operate (ATO).
• Review proposed system changes and evaluate their cybersecurity impact to ensure modifications do not adversely affect system security or accreditation.
• Perform vulnerability assessments, analyze findings, develop mitigation strategies, and document remediation plans.
• Implement and validate security improvements by assessing system configurations, identifying vulnerabilities, and applying security best practices.
• Develop cybersecurity requirements, system security architecture documentation, boundary diagrams, data flow diagrams, hardware/software inventories, and supporting RMF documentation.
• Perform Security Technical Implementation Guide (STIG) implementation, compliance validation, and remediation using tools such as Evaluate STIG, STIG Viewer, and SCAP Compliance Checker.
• Conduct vulnerability scanning using Tenable Security Center (Tenable.sc) and Nessus, analyze results, and coordinate remediation efforts.
• Provide hands‑on Linux systems administration and cybersecurity support for Red Hat Enterprise Linux (RHEL) and other Linux distributions.
• Troubleshoot Linux operating system issues, including network connectivity, systemd services, user authentication, SELinux policy, storage, file systems, permissions, process management, and log analysis.
• Perform cybersecurity troubleshooting on Linux systems by configuring secure settings, reviewing running services and open ports, analyzing firewall rules, verifying certificates, and investigating audit events.
• Troubleshoot network communication using OSI model concepts and standard Linux networking tools such as ping, trace route, tcpdump, netstat/ss, nmcli, ip, dig, nslookup, curl, and wget.
• Collaborate with Software Engineers, Systems Engineers, ISSOs, and Program Managers to integrate cybersecurity requirements into system designs.
• Develop technical mitigation statements, risk acceptance packages, and executive‑level documentation supporting RMF assessments.
• Maintain accurate technical documentation, procedures, and cybersecurity artifacts throughout the program lifecycle.

Must Have:

• Degree in Science, Technology, Engineering or Mathematics (STEM) or advanced degree with ≥5 years relevant experience (or ≥3 years with an advanced degree).
• Active and transferable Secret U.S. government–issued security clearance required prior to start with the ability to obtain Top Secret clearance.
• U.S. citizenship required.
• Experience with Security Technical Implementation Guidance (STIG) and Risk Management Framework (RMF).
• Experience with systems engineering requirements/specifications.
• Experience implementing DoD and Federal Information Assurance (IA) certification and accreditation processes.
• Experience utilizing vulnerability scanning tools such as Tenable Security Center, STIG Viewer, and SCAP Compliance Checker.
• Experience with Linux commands and administration.

Prefer:

• Active and transferable U.S. government–issued DoD TOP SECRET clearance.
• DoDI 8570.01‑M IAT Level‑II compliant certification (e.g., Security+, CISSP).
• Experience with Program Protection Plans (PPP) DoDI 5000.02 and DoDI 5200.39.
• Experience implementing highly technical solutions and reporting their significance to program managers and stakeholders.

• Medical, dental and vision insurance.
• Three weeks of vacation for newly hired employees.
• Generous 401(k) plan with employer matching and independent employer retirement contribution, including a lifetime income strategy option.
• Tuition reimbursement program.
• Student loan repayment program.
• Li…