Cybersecurity Engineering Professional

Compass Point is looking for a Cybersecurity Engineering Professional to work in location. To join our team of outstanding professionals, apply today!

Analyzes, retrieves, catalogs, and safeguards digital data related to cybercrime investigations. Researches and evaluates equipment and software that helps in recovering necessary data. Tests new software to ensure functionality. Documents artifacts and deliverables according to set standards. Conducts complex and high-profile, non-destructive evaluations of computer systems to determine operating and file systems. Analyzes computer network security settings, server, system, router, firewall, intrusion detection system (IDS) and intrusion prevention system (IPS) logs and packet capture data.

Provides detailed examination reports to government agencies. Configures, installs, and maintains Network Intrusion Detection systems and Network Forensic Analysis Tools. Performs work with a high degree of latitude. Handles the most complex issues. Possesses expert knowledge of subject matter. May act as lead or first level supervisor.

Risk Management Framework (RMF) and Security Support:

• The Contractor shall provide cyber security engineering, RMF, and Security Manager support for SCCA activities. Cyber security engineering, RMF, and Security Manager support encompass a range of tasks and responsibilities aimed at ensuring the security and protection of the SCCA’s systems, data, and assets. It involves implementing security measures, conducting risk assessments, supporting DoD authorization and accreditation efforts, and developing strategies to mitigate potential threats and vulnerabilities.

Security Engineering:

• The Contractor shall provide engineering support for SCCA activities. Security engineering involves applying engineering principles and practices to design, implement, and maintain secure systems, operations, and infrastructures. It focuses on preventing unauthorized access, protecting data integrity, and ensuring the confidentiality of sensitive information. Additionally, security engineering includes assisting in the development of security policies and procedures, personnel security functions such as briefings and debriefings, and the management of controlled areas and classified documents.
• Provide security engineering support services to all technical aspects of the SCCASCCA programs using a combination of DoD policy and industry best practices. Tasks may include:
• Support security engineering efforts related to all XaaS product offerings provided from the SCCA program.
• Architect and create secure, modern, and repeatable security solutions for the SCCA Marketplace following industry best practices, such as Dev Sec Ops  and Agile principles, and map to DoD security standards.
• Support security engineering efforts for networking equipment needed to connect existing DoD networks to SCCA Cloud Service Providers at all information levels and classification levels.
• Support design and review for high assurance/high security one-way file transfer solutions.
• Respond, investigate, and assist in the remediation of any breach or potential security issues reported by the SCCA cloud service provider.
• Monitor logs from SCCA managed hardware and software along with SCCA cloud service provider data to identify and remediate potential breaches or misconfigurations.
• Collaborate with cross-functional teams to ensure security requirements are integrated into the design and development of systems and applications.
• Conduct regular security assessments and audits to identify vulnerabilities and recommend appropriate security controls.
• Assist in the development and implementation of security policies, standards, and procedures.
• Stay updated with the latest security technologies, industry trends, and emerging threats to provide proactive security recommendations.
• Perform risk assessments and threat modeling to identify potential risks and vulnerabilities.
• Participate in incident response activities, including investigating security incidents, conducting forensic analysis, and implementing remediation measures.
• Provide guidance to SCCA staff on security best practices,…